Anti-DDoS Support on MMIX Route Servers

Remote Triggered Black Hole Filtering (RTBH)

MMIX Supports RTBH for announcemnet of black-hole filtering. In order to facilitate better routing management for routes being advertised via MMIX Route Servers, we highly recommend all members to make use of BGP community tagging when they annoouncement/received BGP routes to/from the MMIX route servers.

The BGP community supported for RTBH filtering.

RTBH Config Guideline for MMIX members

#Configure to trigger RTBH

ip prefix-list PRF-RTBH permit x.x.x.x/32

!

!Configure outbound route-map for MMIX RS1 and RS2

route-map RM-MMIX-OUT permit 10

match ip address prefix-list PRF-RTBH

set community 9333:66 additive

route-map RM-MMIX-OUT permit 100

end

#Activiation RTBH Route

ip prefix-list PRF-HOST permit 0.0.0.0/0 ge 32

!

!Community list for MMIX RTBH

ip community-list standard CM-MMIX-RTBH seq 5 permit 9333:66

!Inbound route-map for MMIX route servers

route-map RM-MMIX-IN permit 10

match ip address prefix-list PRF-MMIX-HOST

match community CM-MMIX-RTBH

route-map RM-MMIX-IN permit 10000

!

!Configure a static null route for reserved 103.116.193.66

ip route 103.116.194.66 255.255.255.255 null 0

!Stop retransmission

interface Null0

no ip unreachables

How to verify the configuration:

• Go to MMIX Looking Glass

• Select Route Server and Enter your profile by clicking Short Name under "Description" row.

• If your configuration working well, you can see x.x.x.x/32 prefix in routing table.