From efeec5326158353a8afd27057f1b71bc1e1fef4b Mon Sep 17 00:00:00 2001
From: Igor Putovny <igor.putovny@nic.cz>
Date: Mon, 2 Jun 2025 13:44:42 +0200
Subject: [PATCH] Change default value of "allow as set" to false

---
 doc/bird.sgml      | 2 +-
 proto/bgp/config.Y | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/bird.sgml b/doc/bird.sgml
index 8c70e485c..ce0df346e 100644
--- a/doc/bird.sgml
+++ b/doc/bird.sgml
@@ -3290,7 +3290,7 @@ protocol bgp [<name>] {
 	as they complicate security features like RPKI validation. When this
 	option is disabled, then received AS paths with AS sets are rejected as
 	malformed and corresponding BGP updates are treated as withdraws.
-	Default: on.
+	Default: off.
 
 	<tag><label id="bgp-enforce-first-as">enforce first as <m/switch/</tag>
 	Routes received from an EBGP neighbor are generally expected to have the
diff --git a/proto/bgp/config.Y b/proto/bgp/config.Y
index 93df8f966..d73c0317c 100644
--- a/proto/bgp/config.Y
+++ b/proto/bgp/config.Y
@@ -73,7 +73,7 @@ bgp_proto_start: proto_start BGP {
      BGP_CFG->enable_hostname = 0;
      BGP_CFG->capabilities = 2;
      BGP_CFG->interpret_communities = 1;
-     BGP_CFG->allow_as_sets = 1;
+     BGP_CFG->allow_as_sets = 0;
      BGP_CFG->default_local_pref = 100;
      BGP_CFG->gr_mode = BGP_GR_AWARE;
      BGP_CFG->gr_time = 120;
-- 
2.47.2