Could you create a script on an ospf router that enable/disables interfaces randomly, and faster than time neighbor routers update their LSDBs, making a network that's constantly flooded with LSU messages?
8
-
1If someone can "create a script on an OSPF router" for anything, you definitely have a security problem... OSPF is an IGP and requires a high level of trust.– Zac67 ♦Commented Mar 16, 2022 at 13:45
-
@Zac67 I don’t think that’s what they were asking. I think they were just asking if there was a way to do it in general, like using TCL scripting on a Cisco router to mess with interfaces.– Jesse P.Commented Mar 16, 2022 at 13:49
-
1@JesseP. That is what I was asking. Have you ever seen it done before? Or is there a limit to how many LSUs a router can send per unit of time?– GedCommented Mar 16, 2022 at 13:52
-
@Ged See the answer below for this– Jesse P.Commented Mar 16, 2022 at 13:55
-
@JesseP. I would upvote your answer if I could! You mentioned rate-limits can be turned off or at least made negligible. Can this be done to a single device to generate that effect on all neighbors, or would it need to be done to all participants?– GedCommented Mar 16, 2022 at 14:15
|
Show 3 more comments
1 Answer
Yes, you/someone could create a script that shuts down and re-enables interfaces randomly very easily.
Depending on the device and model, there are rate-limits on LSU transmission, to protect against flooding. Here is one document for HPE devices, just as an example, showing that the default is 50 LSUs within 30ms.
There are also rate-limits on command entry, so that would need to be accounted for as well.
This is of course highly advised against, for what should be very obvious reasons.
