For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cjunior_138458's avatar
cjunior_138458
Icon for Altostratus rankAltostratus
Sep 30, 2016

Silverline against internet link DDoS

Regarding: how to protect my internet link and not just VIPs.   Have someone here setting Silverline DDoS in proxy mode setup?   As I understand that an attacker will flood any "backdoor...
application delivery
cloud
Silverline
IainThomson85_1's avatar
IainThomson85_1
Icon for Cumulonimbus rankCumulonimbus
Oct 03, 2016

So from understanding - You have 2 modes.

 

You have BGP Deployment and Proxy Deployment

 

Both come with their own specific use cases, and indeed limitations on if you can deploy it.

 

To answer your question, if you're deploying in "Proxy" mode, you'll delegate the DNS result to a Silverline front end IP, therefore any traffic which queries the FQDN will hit Silverline scrubbing centres... HOWEVER... Your "real" public IP will still be exposed, so therefore may still be subject to a DDoS attack. Its less likely.... but still possible. Security through obscurity.