DDoS Mitigation using BGP Flowspec

Speaker: Justin Ryburn, Juniper Networks
The BGP Flow Specification defined in RFC 5575 gives network operators an additional tool to mitigate the effects of DDoS attacks on their network. In this talk, we will look at the previous tools available to operators for blocking DDoS attacks. We will then look at how BGP Flowspec aims to improve upon those methods. Finally, we will take a look at where BGP Flowspec is working and what needs to be improved to make this tool even more effective.

[@michailxirouchakis8407]

Thanks a lot Justin as well as the NANOG crew. Really nice presentation!

[@SounakVids]

Thank you for the preso. This was very informative.

[@Manustelle]

Great presentation!!!

[@midobashir]

RFC 5575 and even it's later proposed drafts for validation relaxing (Revised Flowspec Validation Procedure) clearly that mentions steps of validating rules , are equivalent to the existing security measures of BGP unicast routing. I understood first two questions well , then this should be an answer to them.

[@victormin76]

TEAMJBZZ!