Forum Discussion
NimbostratusAFM DoS/DDoS Route Advertisement
Hi All,
How does route advertisement of attacking addresses really work when creating a DoS/DDoS profile? Saw in documentations that it advertise to upstream routers or firewalls to null route the traffic, hence blackholing the source attacking address at Layer 3.
Thanks.
4 Replies
- boneyard
MVP
what are you exactly talking about, do you have a webpage or K article or ...?
is it something from page 81 here: https://www.slideshare.net/MarketingArrowECS_CZ/f5-ddos-protection
then check the follow up slides, else show which feature you are looking for.
AFM injects a kernel route into ZebOS which can be redistributed into BGP and black-holed on upstream routers. Latterly we support BGP flowspec (using ExaBGP) as well as RTBH.
ebenThanks Peter.
- eben
Thanks boneyard.
Yes, page 81
