Title: Configuring BGP to Block Denial-of-Service Attacks
Author(s): D. Turk.
Status: INFORMATIONAL
Date: Sep 2004
Length: 19637
This document describes an operational technique that uses BGP communities to remotely trigger black-holing of a particular destination network to block denial-of-service attacks. Black-holing can be applied on a selection of routers rather than all BGP-speaking routers in the network. The document also describes a sinkhole tunnel technique using BGP communities and tunnels to pull traffic into a sinkhole router for analysis.
[sh-index] Back to list of manuals
|
| |
