Hello Javier
Flowspec (Flow Specification) is a feature that provides a way to perform traffic filtering and rate-limiting based on specific flow characteristics, such as source and destination IP addresses, IP protocol, source and destination ports, and more. It is defined in the IETF standard RFC 5575 and extended by RFC 7674.
Flowspec allows network operators to distribute traffic filtering and rate-limiting rules across their network using BGP, which can help mitigate the impact of DDoS attacks and other unwanted traffic patterns.
When Flowspec is enabled, the router receives specially-formatted BGP Network Layer Reachability Information (NLRI) messages containing the flow characteristics and the desired actions to apply to the matching traffic. The router then uses this information to dynamically create and apply traffic filtering and rate-limiting policies.
To configure Flowspec on a Cisco IOS router, you need to enable BGP, configure a BGP session with a neighbor, and configure BGP policy templates with the desired traffic filtering and rate-limiting actions. Additionally, you may need to enable Flowspec client functionality and configure the router to accept and install Flowspec routes.
For a more detailed description of how to configure this Cisco documentation:
I hope this has been helpful!
Laz