DDoS Distributed Deny of Server Attack

Must seen DDoS attack in the world:    https://horizon.netscout.com/?mapPosition=0.00~0.00~1.00

https://www.incapsula.com/blog/questions-ddos-simulation-bgp-attack-vectors-answered.html

https://www.youtube.com/watch?v=ttDUoDf6xzM

Src Remote Trggered Black Hole:

inside the network a retour send a route to the "Src@"

The Ingress router received two route: external and Internal, and it will should the iBGP and drop packect based on the uRPF decision.

BGP FlowSpec:

https://tools.ietf.org/html/rfc7674    ( update of rfc5575 )   Validation Procedure!!!!

The customer attacked Router will send FlowSpec announcement

The BGP speaker will send Firewall rule to Perimeter Fw ( or PE).