Dear all,

I am about to create an RTBH server where it is used for blackholing an IP address in case of DDoS attack. I have implement my topology with Cisco products where they were in charge of BGP.
In my new case, I am running BGP on ccr-1036. One of my design requirement is, NOT installing certain BGP routes in the table (for the DDoS mitigation purpose), but it should be advertised to the upstream BGP neighbor.
I have met this requirement in Cisco with Table-Map feature.

My question, does ccr-1036 support this feature (table-map) or this idea?

Any help is much appreciated.

If you need any further detail, please ping me in this post to elaborate it in deep.

Long story short, a certain iBGP routes should be advertised to the upstream eBGP neighbors, but not installed in the ccr-1036 routing table which is in charge of data-plane.


Regards
erfan

It depends if your iBGP routes are originated within your own AS; or do they come from a different AS??

You can use Routing - BGP - Network. Add your network and un-check 'synchronize'.

It depends if your iBGP routes are originated within your own AS; or do they come from a different AS??

they come from different AS

You can use Routing - BGP - Network. Add your network and un-check 'synchronize'.

what does synchronize do?