draft-ietf-idr-flowspec-redirect-ip
BGP Flow-Spec Redirect-to-IP Action
Flow-spec is an extension to BGP that allows for the dissemination of
traffic flow specification rules. This has many possible
applications, but the primary one for many network operators is the
distribution of traffic filtering actions for distributed denial of
service (DDoS) mitigation. The flow-spec standard, RFC 8955, defines
a redirect-to-VRF (Virtual Routing and Forwarding) action for policy-
based forwarding. This mechanism can be difficult to use,
particularly in networks without Layer 3 VPN infrastructure.
This document defines a new redirect-to-IP flow-spec action that
provides a simpler method of policy-based forwarding. The details of
the action, including the IPv4 or IPv6 target address, are encoded in
newly defined BGP extended communities [RFC4360].