We advertise host routes for malicious sources. You apply an inbound policy that turns every prefix from this session into a blackhole / discard route, so traffic to those destinations is silently dropped on your edge. We advertise prefixes with NO_ADVERTISE bgp community.
Each sample sets a sane maximum-prefix safety limit and routes
the discard next-hop (10.99.99.99 for IPv4, 100::1 for IPv6) to Null0.
Replace <YOUR-ASN> with your own AS number before applying.
Public blocklists mapped to BGP communities.
Communities let peers identify the source list if they want to log, filter, or prefer specific feeds. All routes use next-hop 10.99.99.99.
Replace <YOUR-ASN> and apply inbound.
Loading…