Requirements for integration with cloud-based DDoS scrubbing centers

FastNetMon has solid integrations with multiple leading DDoS mitigation cloud providers, and we are constantly working to add more providers.

Our preferred integration method is API based integration where FastNetMon connects to the scrubbing centre API endpoint to announce/withdraw prefix under attack.

API based integration eliminates the need to make adjustments to BGP policy configuration on routers and, in general, is more reliable as it does not rely on a persistent connection such as BGP, which may be easily disrupted during an attack.

We’re open to using BGP-based integration as well, but in this case, we will need detailed documentation about all aspects of BGP setup and FastNetMon BGP Diversion configuration.

To integrate FastNetMon with your scrubbing centre, we need the following API endpoints:

  • To start announcing IPv4 / IPv6 prefixes over cloud cloud-based scrubbing centre 
  • To withdraw announces for IPv4 / IPv6 prefix via the cloud-based scrubbing centre

Optionally, we will be happy to get some API endpoint which returns the amount of clean / filtered traffic for the prefix during the time when the attack is still going.

We need it to provide more information about attack performance to customers and do prefix withdrawal when the attack is actually finished instead of doing withdrawal by timeout, which has the risk of disabling protection when the attack is still going.

To implement the integration, we will need to have an API specification from your company. Ideally, if you can allocate a test sandbox account which we can use for integration.

To start the integration process, please contact us at support@fastnetmon.com, and we will be happy to discuss details.