Router ACLs

[jhiggins-NZ]

Feature Request for Router ACLs (RACLs)

• Desirable for traffic filtering.
• As a user I would like to configure a ACL and apply it to a L3 interface for the purposes of traffic filtering.

Commonly used variations

• Standard & Extended ACLs
  (http://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-confaccesslists.html#standacl)

• Object groups for ACLs
  (http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/15-sy/sec-data-acl-15-sy-book/sec-object-group-acl.html)

[donaldsharp]

FRR is a Control plane protocol. We currently do not see allot of value to implementing another way to configure netfilter(ip tables for some distrubution), or pf(*bsd distros) inside of FRR at this time.

[donaldsharp]

Added to Feature Request Wiki

[pguibert6WIND]

Hi @jhiggins-NZ, just to note that some preparatory work has been done in flowspec to host netfilter like rules.