Skip to Content.

rare-dev - [rare-dev] new use-case: ddos cleaner

Subject: Rare project developers

List archive


[rare-dev] new use-case: ddos cleaner


Chronological Thread 
  • From: mc36 <>
  • To: "" <>
  • Subject: [rare-dev] new use-case: ddos cleaner
  • Date: Wed, 19 Jan 2022 13:42:44 +0100

hi,
attaching you the updated profiles, the addition is a ddos cleaner, suggested
by frederic...
it could be places inline, connecting the wedge's odd-even ports, and could
be instructed via flowspec...
the goal here is to overcome the limitations in the existing vendor line
cards...
for example cisco's implementation can handle no more than 4k rules
https://xrdocs.io/ncs5500/tutorials/bgp-flowspec-on-ncs5500/
and all the rules are programmed to all the line cards regardless of it's
function...
on the other hand, we can compile a specific profile for this, with only
flowspec enabled,
and allocate all the tcam resources to this single table...
regards,
cs

Attachment: IMG_20220119_131740.jpg
Description: JPEG image

Attachment: profiles.xlsx
Description: application/vnd.openxmlformats-officedocument.spreadsheetml.sheet




Archive powered by MHonArc 2.6.19.

Top of Page