Complex solution for datacenters for DDoS detection and mitigation.
EcoDDS
EcoDDS documentation
3 main elements:
- Traffic monitoring system: any system supporting NetFlow, e.g. EcoSGE [ optionally + EcoDPI, EcoFilter ]
- Traffic analyzing system: DDoS sensor
- Traffic filtering system: EcoDDS
Basic Features
- Monitoring system uses NetFlow + SNMP for traffic information transferring to sensor.
- Sensor uses BGP FlowSpec for anomaly information transferring to EcoDDP.
- EcoDDP uses ACL for DDoS mitigation.
- L2-transparent solution
- IPv4/IPv6 traffic
- 802.1Q, Q-in-Q, MPLS encapsulations
- Up to 6.4Tb
- Up to 3,2M IPv4 filters records
- Up to 640К IPv6 filter records
- Programmable Data Plane of EcoDDP
- Redundant hot-swappable power and cooling units
DDoS sensor
- Linux application
- Server specifications: 128G RAM, 12-cores CPU, 500GB HDD, RAID 1;
Main tasks:
- Receiving NetFlow9
- Traffic analyzing
- Anomaly detecting
- BGP FlowSpec for anomaly information transferring to EcoDDP: 5-tuple, DSCP + additional fields
- Configurable time-duration for filtering
Example
