Day One: Deploying BGP FlowSpec

Protect your network against DDoS attacks! Get into the lab with this hands-on book and learn how the Junos OS supports BGP FlowSpec.


DDoS attacks are becoming increasingly prevalent on public IP networks. They have huge economic impact to the victim as well as the customers who share infrastructure with the victim. This book gives the reader the tools they need to quickly respond and mitigate DDoS attacks using BGP FlowSpec technology.


The Junos OS supports BGP FlowSpec for both IPv4 and VPNv4 route types. These routes are automatically converted into firewall filters to block attacks quickly. And that’s just the start of the book’s customization of the Junos OS to defend and protect your network’s assets from attack.


Be proactive and defend your network before something happens. Get in the lab and learn how to deploy BGP FlowSpec using the Junos OS with this practical and well- written book.


“Day One: Deploying BGP FlowSpec is a concise primer on identifying DDOS attacks and using BGP FlowSpec on the MX Series to defeat them.” - Alex Latzko, Lead Network Engineer, Server Central


IT’S DAY ONE AND YOU HAVE A JOB TO DO, SO LEARN HOW TO:

• Understand how DDoS attacks affect their victims.

• Learn legacy approaches to mitigating DDoS attacks.

• Understand how BGP FlowSpec works.

• Design a dynamic DDoS mitigation solution.

• Understand and configure advanced BGP FlowSpec features including policy best practices. 

• Verify your configuration using basic troubleshooting commands.


About the Author:

Justin Ryburn is a Senior Systems Engineer at Juniper Networks. He has 15 years of experience in various operations, engineering, and sales engineering positions with Service Providers and vendors. Justin contributed content to Cyber Forensics (Auerbach Publishing, 2007). He holds an MBA and a MS in IT Management from Webster University in St. Louis, MO as well as numerous industry certifications.