which f5 product would be applicable to a telco/isp looking to mitigate ddos attacks?

Hey !

U can look the F5 Big IP module "Local Traffic Manager" for DDoS. Actually, is the best F5 module to protect ur network & infrastructure.

For more information : https://f5.com/products/modules/local-traffic-manager

Have a nice day,

FlorenT

Hi Nick07, I have deployed bigip directly on the internet without traditional firewalls for many years even before F5 gained ICSA certification. I've seen the basic LTM module outperform a traditional firewall running comparable hardware. F5 now has the AFM module which has additional DDOS functionality, and the new hardware platforms have purpose built chips designed to mitigate a number of DOS attack types.

i would say it depends on what you want in the area of dos protection

BIG-IP on itself (as you need one module call it LTM) already can handle a lot of data without getting into isues, syn cookie protection comes into mind here.

with LTM you can use irules to mitigate certain attacks like slow loris and such.

ASM has the posibility to protected specific application against dos attacks based on latency or traffic changes.

AFM offers a range of layer 2 - 4 dos protections for the whole box.

it also offers specific SIP and DNS dos protection.

a lot will depend on you exact wishes, my advise would be to engage your local F5 SE and discuss with them what is possible, they might also have reference customers / cases to show you.