search

pavel-odintsov / fastnetmon

FastNetMon - very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support
https://fastnetmon.com
GNU General Public License v2.0
3.4k stars 561 forks source link

Create sane defaults for 'announce_whole_subnet'-options.. #1005

Open tuxis-ie opened 5 months ago

tuxis-ie commented 5 months ago

If it does not help, please fill information below:

To work with 'announce_whole_subnet'-options, we must configure each existing subnet in /etc/networks_list. For IPv4 this is doable, but for IPv6, that's quite a long list.

I would love to see a default option where the default IPv4-subnet would be a /24 and the default IPv6-subnet would be a /48. Those are the minimal accepted sizes on the internet, so they seem like a sane default.

Thanks!

pavel-odintsov commented 5 months ago

Hello!

Thank you for reporting!

The very first issue here that we do not support IPv6 per subnet announces at all: https://github.com/pavel-odintsov/fastnetmon/blob/18fea2e8b80d731e0ce68d2a957229134d0c0787/src/actions/gobgp_action.cpp#L147

We need to start from covering this gap first.