draft-wang-idr-flowspec-dip-origin-as-filter

Destination-IP-Origin-AS Filter for BGP Flow Specification

groupnone stateactive pages8 rev13 expires2026-09-20 canonicalhttps://datatracker.ietf.org/doc/draft-wang-idr-flowspec-dip-origin-as-filter/

This document defines an extension to the Border Gateway Protocol (BGP) Flow Specification (FlowSpec) to enable filtering based on the Origin Autonomous System (AS) of the destination IP address. This extension is particularly useful in mitigating Distributed Denial of Service (DDoS) attacks where the target IP addresses are dynamic but belong to a specific destination AS.