If I have a controller device advertising flowspec route to a PE, and that PE has the following config on it:
flowspec
address-family ipv4
local-install interface-all
Does this mean that any flow-spec policy that this router receives will be applied to ALL interfaces?
For example if I had a policy on the controller (see below) that said something like "match ping and police to 1Mbps" would this apply to every interface on the PE?
class-map type traffic match-all CM-ICMP
match protocol icmp
end-class-map
!
!
policy-map type pbr PM-SLOW-PING
class type traffic CM-ICMP
police rate 1 mbps
!
!
class type traffic class-default
!
end-policy-map
!
router bgp 100
address-family ipv4 flowspec
!
neighbor 10.1.1.1
address-family ipv4 flowspec
!
!
If it would apply to every interface, is there a way to make it only apply to say, the transit/peering interfaces? It seems odd that I would want to apply the same policy to all interfaces on a device indiscriminately.
