csit/variables/bgpflowspec/bgp-flowspec.json

   1 {
   2     "bgp-flowspec:flowspec-routes": {
   3         "flowspec-route": [
   4             {
   5                 "path-id": 0,
   6                 "route-key": "all packets to 192.168.0.1/32 AND from 10.0.0.1/32 AND where IP protocol equals to 6 AND where port equals to 80 AND where destination port is greater than 8080 and is less than 8088 AND where source port is greater than 1024 AND where ICMP type equals to 0 AND where ICMP code equals to 0 AND where TCP flags does match 32 AND where packet length is greater than 400 and is less than 500 AND where DSCP equals to 20 AND where fragment does match 'IS FIRST' ",
   7                 "attributes": {
   8                     "extended-communities": [
   9                         {
  10                             "transitive": true,
  11                             "traffic-action-extended-community": {
  12                                 "sample": true,
  13                                 "terminal-action": true
  14                             }
  15                         }
  16                     ],
  17                     "origin": {
  18                         "value": "igp"
  19                     },
  20                     "as-path": {},
  21                     "local-pref": {
  22                         "pref": 100
  23                     }
  24                 },
  25                 "flowspec": [
  26                     {
  27                         "destination-prefix": "192.168.0.1/32"
  28                     },
  29                     {
  30                         "source-prefix": "10.0.0.1/32"
  31                     },
  32                     {
  33                         "protocol-ips": [
  34                             {
  35                                 "op": "end-of-list equals",
  36                                 "value": 6
  37                             }
  38                         ]
  39                     },
  40                     {
  41                         "ports": [
  42                             {
  43                                 "op": "end-of-list equals",
  44                                 "value": 80
  45                             }
  46                         ]
  47                     },
  48                     {
  49                         "destination-ports": [
  50                             {
  51                                 "op": "greater-than",
  52                                 "value": 8080
  53                             },
  54                             {
  55                                 "op": "end-of-list and-bit less-than",
  56                                 "value": 8088
  57                             }
  58                         ]
  59                     },
  60                     {
  61                         "source-ports": [
  62                             {
  63                                 "op": "end-of-list greater-than",
  64                                 "value": 1024
  65                             }
  66                         ]
  67                     },
  68                     {
  69                         "types": [
  70                             {
  71                                 "op": "end-of-list equals",
  72                                 "value": 0
  73                             }
  74                         ]
  75                     },
  76                     {
  77                         "codes": [
  78                             {
  79                                 "op": "end-of-list equals",
  80                                 "value": 0
  81                             }
  82                         ]
  83                     },
  84                     {
  85                         "tcp-flags": [
  86                             {
  87                                 "op": "end-of-list match",
  88                                 "value": 32
  89                             }
  90                         ]
  91                     },
  92                     {
  93                         "packet-lengths": [
  94                             {
  95                                 "op": "greater-than",
  96                                 "value": 400
  97                             },
  98                             {
  99                                 "op": "end-of-list and-bit less-than",
 100                                 "value": 500
 101                             }
 102                         ]
 103                     },
 104                     {
 105                         "dscps": [
 106                             {
 107                                 "op": "end-of-list equals",
 108                                 "value": 20
 109                             }
 110                         ]
 111                     },
 112                     {
 113                         "fragments": [
 114                             {
 115                                 "op": "end-of-list match",
 116                                 "value": "first"
 117                             }
 118                         ]
 119                     }
 120                 ]
 121             }
 122         ]
 123     }
 124 }