Forum Discussion
RockBD
Altocumulus
AltocumulusHow to Protect TCP Middlebox Reflection
Hi All Hope you are doing fine. Recently I came across a DoS-related article which is as follows https://geneva.cs.umd.edu/posts/usenix21-weaponizing-censors/ Can anyone help me Protect TCP Middl...
Daniel_Wolf
MVP
MVPHi RockBD,
just for clarification: I understand that you want to protect your infrastructure from being attacked with amplification attacks. The article you are referring to describes an attack scenario where vulnerable firewalls or content filtering systems are abused to reflect and amplify TCP (or UDP) traffic to a victim.
For this kind of attacks (L3/L4) you want to use a cloud-based DDoS protection such as F5 Distributed Cloud or Silverline. Additionally, you might want to consider a hybrid solution, combining a cloud-based scrubbing center with BIG-IP Advanced Firewall Manager.
F5 Advanced WAF is helpful against L7 DoS or DDoS attacks.
Btw. nice article 🙂
KR
Daniel
RockBDAltocumulus
AltocumulusOh i forgot it is L3 DoS attack. Thanks for the reply and suggestions.
