> For the complete documentation index, see [llms.txt](https://docs.fusion.vectra.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fusion.vectra.ai/automate-responses/configuring-response-integrations/flowspec-traffic.md).

# Flowspec (Custom)

{% hint style="warning" %}
**Prior to creating a Flowspec plugin, you will need to configure at least 1 device with a unicast BGP neighbor.**
{% endhint %}

Flowspec (Custom) differs from [Flowspec](/automate-responses/configuring-response-integrations/flowspec-1.md) in that it allows for a custom rule to be added. Rules are written in the flowspec token language, e.g. `match destination DSTIP then discard`

## Prerequisites <a href="#prerequisites" id="prerequisites"></a>

Different vendors and products may have their unique documentation and prerequisites for this setup. Below are example links to configure devices with a unicast BGP neighbor:

* [Cisco](https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe-16/irg-xe-16-book/bgp-dynamic-neighbors.html)
* [Juniper](https://www.juniper.net/documentation/us/en/software/junos/bgp/topics/ref/statement/neighbor-edit-protocols-bgp.html)
* [Arista](https://arista.my.site.com/AristaCommunity/s/article/bgp-peering-configuration-examples-for-service-providers)

## Netography Portal Steps <a href="#netography-portal-steps" id="netography-portal-steps"></a>

In **Settings > Response Integrations**, click **Add Integration**. Select **Flowspec (Custom)**

![](/files/MCu5ophrRcWWt0lOUns1)

## Configuration <a href="#configuration" id="configuration"></a>

The following fields are specific to the Custom Flowspec integration.

| Field              | Required | Description                                                                                       | Examples                             |
| ------------------ | -------- | ------------------------------------------------------------------------------------------------- | ------------------------------------ |
| `Neighbors`        | yes      | IPv4/v6 unicast BGP neighbors configured in the Netography Portal.                                |                                      |
| `Local Preference` | yes      | Used to choose the exit path for an autonomous system. Default 100                                | 100                                  |
| `Rule`             | yes      | Custom flowspec token language                                                                    | match destination DSTIP then discard |
| `Factors`          | yes      |                                                                                                   | srcip                                |
| `Expiration`       |          | Number of seconds the blocklist will remain active                                                | 3600                                 |
| `Max`              |          | Limit on number of blocks                                                                         | 1000                                 |
| `Allow List`       |          | One or many Allow Lists configured in the Netography Portal, or a List of IP or IP/CIDR addresses |                                      |
| `Aggregate`        |          | Aggregate IP addresses by mask length                                                             |                                      |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.fusion.vectra.ai/automate-responses/configuring-response-integrations/flowspec-traffic.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.