Lightning Talk: Automated DDOS Protection for our National Service-Provider Backbone (that lets our engineers sleep at night)
At Flexential (formerly Peak10 + Viawest) we created an automated DDOS detection/mitigation solution that protects all company and customer IP assets across all of …
Talk Title | Lightning Talk: Automated DDOS Protection for our National Service-Provider Backbone (that lets our engineers sleep at night) |
Speakers | Jeremy Palmer |
Conference | NANOG73 |
Conf Tag | |
Location | Denver, CO |
Date | Jun 25 2018 - Jun 27 2018 |
URL | Talk Page |
Slides | Talk Slides |
Video | Talk Video |
At Flexential (formerly Peak10 + Viawest) we created an automated DDOS detection/mitigation solution that protects all company and customer IP assets across all of our datacenters and ASes. The system is able to automatically detect inbound or outbound DDOS attacks, reroute attack traffic to our DDOS scrubbing vendor, determine the specific customer that is under attack, and notify the customer via our ticketing system. This solution has resulted in a large reduction of DDOS-related escalations, and allows our engineers to sleep at night (most of the time). We’ll discuss the overall solution including challenges and lessons learned, and give examples of the system in action.