DDoS Mitigation Guide by Attack Type

Different DDoS attacks require different defenses. Here's how to mitigate 8 common types:
→ Volumetric & Amplification
→ Protocol & State-Exhaustion
→ Application-Layer (L7)
→ Carpet-Bombing
→ Multi-Vector
→ Pulse-Wave & Burst
→ Reflection Attacks
→ Cloud & Hybrid

FastNetMon detects anomalies in seconds and auto-triggers BGP BlackHole, FlowSpec, or scrubbing diversion.

#DDoS #Cybersecurity #NetworkSecurity #InfoSec #NetSec #ThreatMitigation #FastNetMon

Oh wow, read on a feed of #FastNetMon that MS-DOS 4.0 was open sourced under MIT. An OS that was implemented completely in #Assembly .

Some neat bit of #history.

Will add a link to the repo, once I find it.

#FastNetMon runs just fine in #FreeBSD jail. The ability to access network interfaces through the #netmap[1] can be easily granted, though the number of threads created exceeds the number of RSS queues available on the NICs. So there is still room for testing, maybe it is worth preparing flame graphs too.

1. http://info.iet.unipi.it/~luigi/netmap/

Entering the #YearOfTheDragon I spent some time today testing how #FastNetMon
runs in netmap mode on #FreeBSD. The results were so impressive, that I switched from netflow to netmap mode immediately. Great job Pavel Odintsov!
FastNetMon Community Edition is a free, open-source DDoS protection tool. We have PR 276516 on FreeBSD Bugzilla with a patch updating this port to the most recent version if you want to test it.

https://github.com/pavel-odintsov/fastnetmon

GitHub - pavel-odintsov/fastnetmon: Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support - pavel-odintsov/fastnetmon

GitHub

Excited to share our latest blog post from Pavel Odintsov from FastNetMon.

#FastNetMon is one of the early adopters of #FerretDB for their #SaaS offering. 

Read the entire blog post on Pavel's experience using FerretDB here -- https://blog.ferretdb.io/fastnetmon-picked-ferretdb-saas-offering/

--

Let's bring #MongoDB back to #opensource 

FerretDB is a truly open source alternative to MongoDB built on #Postgres & #SQLite

Why FastNetMon picked FerretDB for their SaaS offering | FerretDB Blog

One of the early adopters of FerretDB, Pavel Odintsov describes the experience of using FerretDB and why FastNetMon picked it for their SaaS offering.

For context: #FastNetMon is a nice piece of software to detect #DDoS attacks and trigger actions (shell scripts, bgp route injection, etc) for mitigation.

https://github.com/pavel-odintsov/fastnetmon

GitHub - pavel-odintsov/fastnetmon: Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support - pavel-odintsov/fastnetmon

GitHub

Finished porting #FastNetMon 1.2.4 to #FreeBSD. You will be able to install via package or ports in a bit.

https://cgit.freebsd.org/ports/commit/?id=b8c336c15842011facfe07163cb3d91e50bc1468

ports - FreeBSD ports tree

Meanwhile, porting #fastnetmon 1.2.4 to #FreeBSD and dealing with a lot of C++ fun.