I think Radware has to sit inline. I do not believe they offer BGP offramp, so keep that in mind. On Thu, Jan 31, 2013 at 10:39 AM, Jay Coley <j@jcoley.net> wrote:
+1 for Radware
On 31/01/2013 18:36, dennis wrote:
Agreed, my shortlist for evaluation would include Arbor, Radware and Genie NRM. New players to the market include just about every IPS and application load balancing solution out there.
-------------------------------------------------- From: "Suresh Ramasubramanian" <ops.lists@gmail.com> Sent: Thursday, January 31, 2013 10:23 AM To: "Piotr" <piotr.1234@interia.pl> Cc: <nanog@nanog.org> Subject: Re: box against dos/ddos
arbor peakflow to start with?
On Thursday, January 31, 2013, Piotr wrote:
Hi,
I looking some box (vendor, model), which i can put out of the main/product network, which can analyze packets netflow,sflow,syslog from bgp router(s) and after discover some anomaly it can do some action, for example:
- Box have bgp session with bgp router and advertise attacked ip prefix with some community. Bgp router set next-hop for this prefix to /dev/null
Normal traffic via bgp router is about 1G/s in and 10G/s out
What is worth of looking and what you suggest ?
thanks for help, Piotr
-- --srs (iPad)