The main functionality of a router packet forwarding and filtering the same.
An alternative way to apply an ACL to filter packets based on destination is to create a series of static routes, making them point to null0, this technique is commonly described as a black hole routing or forwarding to null0.
Null0 is a pseudo-interface that works much like the null device of some operating systems (ie / dev / null) is always active and can not send or receive traffic. Being a pseudo-interface for the EFC is a bad interface, so a route that points to null0 is discarded and directly forwarding, CEF or dCEF no impact on the processor of the router.
For example:
interface null0
no icmp unreachables
!
ip route 127.0.0.0 255.0.0.0 null 0
ip route 193.121.1.254 0 255 255 255 255 null
In this case the no icmp unreachables is to prevent unnecessary responses when traffic is passed to null0.
We can assume that the black hole routing technique exploits the ability to forward the router to make the drop packets destined for networks that want to protect. Read the rest of this entry »