11 ms·
Are there some good open source scrubbing center projects you might be able to recommend? Also might you have any resources or links to how these scrubbing ser
by bogomipz 9y ago
Are there some good open source scrubbing center projects you might be able to recommend?
Also might you have any resources or links to how these scrubbing services are implemented, what heuristics they use etc?
I understand the front end of DDOS mitigation i.e netflows, BGP communities and RTBH, and GRE tunnels to the scrubbing centers. However the details of how the scrubbing centers works is something of a mystery to me.
When looking at any of the big DDOS provider's literature, the scrubbing centers are mostly just opaque boxes with little documentation on how they actually work.
- pavel_odintsov 9y agoYou could consider this thing https://github.com/luigirizzo/netmap-ipfw https://github.com/luigirizzo/netmap-ipfw
- bogomipz 9y agoThanks, unfortunately the documentation about the project is rather scant.
- pavel_odintsov 9y agoYou could read my blog post about it instead: https://translate.google.com/translate?hl=en&sl=ru&tl=en&u=https%3A%2F%2Fwww.stableit.ru%2F2015%2F03%2Flinux-netmap-ipfw.html https://translate.google.com/translate?hl=en&sl=ru&tl=en&u=h... It's in russian but Google trsnalate crashes language baarriers! :)
- bogomipz 9y agoThanks! This is helpful. I like your blog name, I'm assuming that translation is correct :)