
Case study summary
As one of Bangladesh’s leading internet service providers, Link3 Technologies operates a high-traffic network that must remain stable and responsive under all conditions. To support this, Link3 deployed FastNetMon as the central platform for real-time DDoS detection and automated mitigation. By integrating FastNetMon directly into their network automation and remote scrubbing workflows, Link3 gained faster detection, deterministic control over mitigation actions, and a cost-effective way to protect customer traffic at scale.
About the customer and engineering requirements
Link3 Technologies Ltd. is one of Bangladesh’s leading ISPs, delivering nationwide connectivity alongside a wide range of enterprise networking services. Operating a large, high-volume network means that even short-lived DDoS events can impact customer experience and operational stability.
To support their NOC and SOC teams, Link3 required a DDoS detection platform that could be deployed quickly, integrate cleanly with existing automation workflows, and scale reliably in an ISP environment. Rapid detection, reliable notifications, and seamless integration with a remote scrubbing centre were key technical requirements. Equally important was maintaining flexibility and operator control, rather than adopting a rigid, black-box mitigation model.
DDoS detection with full operator control
FastNetMon is deployed at ISPs globally, where network operators need full control over DDoS detection and mitigation workflows. The platform exposes traffic data, supports configurable per-host and per-host-group thresholds, and provides deterministic detection logic that operators can directly integrate into custom mitigation workflows.
Instead of enforcing predefined responses, FastNetMon acts as a programmable detection and control layer. This allows engineering teams to build mitigation paths that match their own network topology, routing policies, and operational practices — an approach well suited to complex ISP environments.
The FastNetMon solution and implementation at Link3
Link3 uses FastNetMon as the central engine for real-time DDoS detection and automated mitigation. Traffic is monitored at both per-host and per-host-group levels, using multiple threshold tiers to classify anomalies with high precision.
When FastNetMon detects an attack, it automatically triggers a predefined sequence of actions based on the attack pattern. These actions include signalling customer-edge routers, initiating RTBH where appropriate, and triggering Link3’s remote scrubbing centre via BGP to divert and clean malicious traffic in real time.
This automation allows mitigation decisions to be executed consistently and immediately, without requiring manual intervention from operators during an active attack.
Results
With FastNetMon in place, Link3 benefits from near-real-time attack detection, instant notifications, and automated activation of both local and remote mitigation controls. The solution provides a cost-effective way to strengthen network resilience while maintaining the flexibility and scalability required by a high-volume ISP. Integration with the remote scrubbing centre ensures that malicious traffic is handled efficiently and consistently, reducing operational load on the NOC team and allowing engineers to focus on maintaining overall network performance.
From the NOC & SOC Team
Link3 chose FastNetMon for its speed, automation-friendly
architecture, and customisation capabilities. The platform’s
ability to scale, integrate with existing BGP-based workflows,
and support features like Flow Spec, RTBH, and automated
scrubbing diversion made it the most suitable option for our
environment.
NOC & SOC Team, Link3 Technologies Ltd.
- Ujjal Biswas, Senior Manager
- Ahasan Ahmed, Senior Manager
- Subrata Sarker, Senior Manager
About FastNetMon
FastNetMon delivers high-performance DDoS detection software for companies at any scale. With extensive experience in telecom, mobile, and cloud environments, FastNetMon enables network operators to build fully automated, operator-controlled mitigation workflows tailored to their infrastructure.Learn more at www.fastnetmon.com or get in touch at sales@fastnetmon.com