sflow-rt / ddos-protect

DDoS mitigation using BGP RTBH and FlowSpec

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

BGP metrics are not generated

gastongutierrez opened this issue · comments

I'm running an instance of ddos-protect, I'm collecting flows from 2 agents, and have BGP up with one of the agents. 1 BGP prefix is being learned, but metrics are not being merged. Am I missing something?

docker run --mount source=sflow-rt,target=/sflow-rt/ \
--net=host --name=ddos-protect --sysctl net.ipv4.ip_unprivileged_port_start=0 \
sflow/ddos-protect  -Dddos_protect.router=<agent/router ip> \
-Dddos_protect.as=65000 -Dbgp.port=179 -Dddos_protect.id=<local ip>

2020-10-29T18:55:35Z INFO: Starting sFlow-RT 3.0-1527
2020-10-29T18:55:36Z INFO: Version check, running latest
2020-10-29T18:55:37Z INFO: Listening, BGP port 179
2020-10-29T18:55:37Z INFO: Listening, sFlow port 6343
2020-10-29T18:55:37Z INFO: Listening, HTTP port 8008
2020-10-29T18:55:37Z INFO: DNS server 
2020-10-29T18:55:37Z INFO: DNS server 
2020-10-29T18:55:38Z INFO: app/prometheus/scripts/export.js started
2020-10-29T18:55:38Z INFO: app/browse-flows/scripts/top.js started
2020-10-29T18:55:38Z INFO: app/ddos-protect/scripts/ddos.js started
2020-10-29T18:55:55Z INFO: BGP open <agent/router ip> 58215

There are no bgp related metrics in flowkeys/json.

I do get one prefix learned, but no topprefixes:

"learnedPrefixesAdded": 1,

"topPrefixes": [],

By default, the application does not merge the sFlow and BGP data.

The latest version includes an option to merge the data using the ddos_protect.router..agent setting. For example,

ddos_protect.router=x.x.x.x
ddos_protect.router.0.agent=x.x.x.x