GSHUT community support for bgp advertised prefixes towards f5xc

Hello,

also described in TAC SR 01010154 asking about GSHUT bgp community support which can disable traffic blackholing in some specific situation.
Our devices peering with f5xc ddos are setup to be in maintenance mode during boot and convergence after the boot and using GHSUT community to signal to other devices that it is not yes ready to forward traffic, the proper reaction to it based on RFC is to lower the priority of received prefixes.
In our case after reload of primary device f5xc immediately forwards traffic to us causing blackholing it even there is secondary fully functional path available but with low local preference then primary in this situation, if GHSUT will work at you side and lower LP, secondary path will be used until we stop announce the GSHUT community and no blackholing impact.

  • Guest
  • Nov 12 2025
  • Attach files