|
We’ve released FastNetMon Advanced 2.0.385, with improved FlowSpec filtering statistics, new IPv6 attack detection and flow tracking, enhanced BGP announcement options, TLS support for ClickHouse, and additional monitoring and stability improvements.
|
|
|
|
|
|
Juniper has disclosed two critical Junos OS vulnerabilities, including one affecting BGP FlowSpec and another that could allow remote code execution on MX Series routers using IKE. If you use Juniper equipment in your DDoS mitigation setup, it’s worth checking whether your devices and configurations are affected. Read more.
|
|
|
|
VPP Performance Experiments |
|
|
|
 |
FastACL: Pushing Inline Filtering Performance Further |
We’ve been spending a lot of time in the lab pushing our inline filtering stack on both Arm and x86 hardware. Recent experiments took VPP filtering to 100G line rate on NVIDIA BlueField-3, boosted small-packet performance by 46.5% with VPP’s native RDMA driver, and showed how the right NUMA configuration can take an AMD EPYC system from 148 Mpps to 450 Mpps.
If high-performance packet processing is your thing, these three deep dives are worth the read!
|
|
| |
|
|
 |
Detecting and Mitigating IPv6 DDoS |
IPv6 DDoS is not a fundamentally different problem, but it does require operators to make sure IPv6 is covered end to end — from telemetry export and traffic counters to thresholds and mitigation. The article looks at the practical differences that matter in production, including ICMPv6, IPv6 flow visibility, /128 BGP blackholing, and the current state of IPv6 FlowSpec support in FastNetMon. |
|
| |
|
See you at DENOG18! | |  |
We’re heading to DENOG 18 in Essen - hope to see many of you there! |
|
Greetings from NANOG 98! | |  |
We’ve just wrapped up NANOG 98 in Miami - read our recap! | |
|
|
|
|
We’d love to make this newsletter more of a two-way conversation. So we’ve opened a Reddit thread for this edition — drop in, share your thoughts, ask a question, add context, or whatever comes to mind!
|
|
| |
|
 | Comprehensive solution
for DDoS Security |
|
|
|
|
