End-to-End Mitigation
BRKSEC-3009
BRKSEC-3009
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
In-the-Cloud Services<br />
BGP-based “inter-AS” DDoS Protection<br />
• Traffic <strong>to</strong> the victim is steered-up<br />
in<strong>to</strong> the DDoS protection service<br />
by advertising a /24 prefix owned<br />
by the victim<br />
• Similar as BGP hijacking<br />
• Good traffic is filtered and<br />
transmitted through a tunnel<br />
<strong>to</strong> the victim<br />
DDoS <strong>Mitigation</strong> Service<br />
Scrubbing<br />
device<br />
The Internet<br />
1.2.0.0/16<br />
BGP<br />
mysite.com<br />
1.2.3.4<br />
3