How to Protect TCP Middlebox Reflection

Hi RockBD,

just for clarification: I understand that you want to protect your infrastructure from being attacked with amplification attacks. The article you are referring to describes an attack scenario where vulnerable firewalls or content filtering systems are abused to reflect and amplify TCP (or UDP) traffic to a victim.

For this kind of attacks (L3/L4) you want to use a cloud-based DDoS protection such as F5 Distributed Cloud or Silverline. Additionally, you might want to consider a hybrid solution, combining a cloud-based scrubbing center with BIG-IP Advanced Firewall Manager.
F5 Advanced WAF is helpful against L7 DoS or DDoS attacks.

Btw. nice article 🙂

KR
Daniel