Implement (only manually-tested) flowspec community detection except ratelimit

[flowspec-xdp] / install.sh

diff --git a/install.sh b/install.sh
index be3ead3d23e9b59f01ea2bd71fa768c2827f9ffd..af9a3ede9c5f7e81bc4dcd6c4e8bad281c86bd46 100755 (executable)
--- a/install.sh
+++ b/install.sh
@@ -1,8 +1,8 @@
 #!/bin/bash
 set -e
 
-RULES="$(birdc show route table flowspec4)
-$(birdc show route table flowspec6)"
+RULES="$(birdc show route table flowspec4 primary all)
+$(birdc show route table flowspec6 primary all)"
 
 echo "$RULES" | ./genrules.py --8021q=drop-vlan --v6frag=ignore-parse-if-rule --ihl=drop-options
 clang -std=c99 -pedantic -Wall -Wextra -Wno-pointer-arith -Wno-unused-variable -O3 -emit-llvm -c xdp.c -o - | llc -O3 -march=bpf -filetype=obj -o xdp
@@ -18,3 +18,4 @@ ip link set "$1" xdpoffload obj xdp sec xdp_drop || (
                echo "Failed to install in driver, using generic..." && ip link set "$1" xdpgeneric obj xdp sec xdp_drop
        )
 )
+echo "$RULES" | grep "^flow. {" > installed-rules.txt