AWS directconnect documentation change
Summary
Updated route prefix limits for BGP sessions and added new sections for prefix pool sizes per connection type and maximum allocations per VIF/Direct Connect gateway.
Security assessment
The changes clarify routing limits and introduce 'inbound prefix controls' to prevent BGP session failures, but there is no evidence of addressing a specific security vulnerability. The updates focus on service reliability and quota management rather than patching security weaknesses.
Diff
diff --git a/directconnect/latest/UserGuide/limits.md b/directconnect/latest/UserGuide/limits.md index 2f805384f..6b3b5d7dc 100644 --- a//directconnect/latest/UserGuide/limits.md +++ b//directconnect/latest/UserGuide/limits.md @@ -21 +21,6 @@ Number of virtual interfaces per Link Aggregation Group (LAG) | 51 | When AWS Di -Routes per Border Gateway Protocol (BGP) session on a private virtual interface or transit virtual interface from on-premises to AWS. If you advertise more than 100 routes each for IPv4 and IPv6 over the BGP session, the BGP session will go into an idle state with the BGP session DOWN. | 100 each for IPv4 and IPv6 | Contact your Solutions Architect (SA) or Technical Account Manager (TAM) for further assistance. +Inbound route prefixes per BGP session on a private or transit virtual interface. If you advertise more prefixes than the allocated count for IPv4 or IPv6, the BGP session goes into an idle state (BGP DOWN). The default allocation is 100 each for IPv4 and IPv6. You can increase this using inbound prefix controls. | 100 each for IPv4 and IPv6 | Default: 100 each for IPv4 and IPv6. You can allocate up to 1,000 per VIF using inbound prefix controls. For more information, see [Inbound prefix controls](./prefix-controls.html). +Prefix pool size per 1 Gbps or 10 Gbps dedicated connection | 5,000 (IPv4), 5,000 (IPv6) | This quota cannot be increased. +Prefix pool size per 100 Gbps dedicated connection | 30,000 (IPv4), 30,000 (IPv6) | This quota cannot be increased. +Prefix pool size per 400 Gbps dedicated connection | 50,000 (IPv4), 50,000 (IPv6) | This quota cannot be increased. +Maximum prefix allocation per private or transit virtual interface | 1,000 (IPv4), 1,000 (IPv6) | Contact your SA or TAM for further assistance. +Total prefix pool allocations per Direct Connect gateway | 10,000 (combined IPv4 + IPv6) | This quota cannot be increased.