thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Routing & Switching · Advanced

BGP Flowspec

A BGP address family (RFC 8955) that distributes traffic filtering rules matching on packet fields, with actions such as drop or rate-limit.

Definition

Flowspec rules match source/destination prefix, ports, protocol, DSCP and more, with actions encoded as extended communities (traffic-rate, redirect-to-VRF, mark). It allows a central controller to push DDoS mitigation across the network edge faster than manual ACLs.

Example

A flowspec rule drops UDP port 123 traffic to 192.0.2.10.

Exam tip

Flowspec is more granular than RTBH, which drops all traffic to a prefix.

Related terms