Hi Robert,
I have ASPA implemented.
I use the following function:
function is_aspa_invalid(bool is_upstream) -> bool {
if aspa_check(ASPAS, bgp_path, is_upstream) = ASPA_INVALID then {
print "Reject: ASPA INVALID: ", net, " ", bgp_path, " protocol: ",
proto;
return true;
}
return false;
}
and I call this function in my filter for upstream as follows:
if is_aspa_invalid(false) then {
reject;
}
What I found, for ASPA the upstream question is, is your ASN the upstream of
the peer. In case of a transit the answer is no.
Regards,
Jelle
-----Original Message-----
From: Bird-users <[email protected]> On Behalf Of Robert Scheck
Sent: Friday, 4 April 2025 21:19
To: [email protected]
Subject: Example configuration for ASPA with rpki-client?
Hello,
does somebody have an example configuration snippet for ASPA in BIRD with
rpki-client? I've read https://bird.network.cz/?get_doc&v=20&f=bird-6.html
but I'm still not sure how the configuration in BIRD for an AS with two transit
providers (just upstreams, no downstreams) would look like...
Regards,
Robert
