Feature requests

Sometimes it is useful to create the BGP neighbors in passive mode when FNM controls the GoBGP daemon. If I manually add it to the gobgp config file, FNM overwrites it every time, so we have several sessions flapping until the config is updated manually again and locked.

would be nice to see an overview of modified setting before commiting

For example it may be useful to create flexible threshold only for specific type of traffic like: traffic from port 11211 udp and then in same time to have catch-all threshold which will include everything else to ensure protection from other attack types. We definitely can create static threshold for UDP traffic but it will catch traffic which is already included in flexible thresholds and both of them will trigger in same time which is not desirable outcome It cannot be implementer right now but by adding flexible threshold like this: 1) port 11211 udp 2) port 123 UDP 3) not port 123 and not port 11211 UDP Section 3 cannot be implemented right now but it's important for us to have in our tool

https://core.telegram.org/bots/api#sendmessage - Telegram have ability to send message to specific threads, but we have not support for this

It's very useful to share with our support for debugging

For example host 1.2.3.4 has reached threshold for blackhole and stays above for 5 minutes and only after that period of time / duration FastNetMon will declare it as an attack. It will help to reduce number of false positives caused by legitimate traffic.

In response to rise of carpet bombing attacks we need to provide flow spec based mitigations on whole prefix.

Add limit about number of flow spec announces because upstream breaks bgp session

So it would be possible to create similar hostgroups, without setting all hostgroups threshold manually

We can assign special BGP Community for each hostgroup and then automatically add all networks which match it for particular hostgroup