hack3ric/flow: BGP flowspec executor (Flowspec implementation for Linux, including the Netfilter part)
github.com/hack3ric/flow
github.com/hack3ric/flow
GitHub - hack3ric/flow: BGP flowspec executor
BGP flowspec executor. Contribute to hack3ric/flow development by creating an account on GitHub.
github.com
November 22, 2024 at 8:51 PM
hack3ric/flow: BGP flowspec executor (Flowspec implementation for Linux, including the Netfilter part)
github.com/hack3ric/flow
github.com/hack3ric/flow
FastACL Community is live. The world's first open-source DDoS scrubbing data plane for commodity hardware.
FD.io VPP plugin, inline filtering, all 12 RFC 8955/8956 FlowSpec components, IPv4 and IPv6, up to 1M active rules. Apache 2.0.
github.com/FastNetMon/FastACL-Community
FD.io VPP plugin, inline filtering, all 12 RFC 8955/8956 FlowSpec components, IPv4 and IPv6, up to 1M active rules. Apache 2.0.
github.com/FastNetMon/FastACL-Community
September 25, 2026 at 10:49 AM
FastACL Community is live. The world's first open-source DDoS scrubbing data plane for commodity hardware.
FD.io VPP plugin, inline filtering, all 12 RFC 8955/8956 FlowSpec components, IPv4 and IPv6, up to 1M active rules. Apache 2.0.
github.com/FastNetMon/FastACL-Community
FD.io VPP plugin, inline filtering, all 12 RFC 8955/8956 FlowSpec components, IPv4 and IPv6, up to 1M active rules. Apache 2.0.
github.com/FastNetMon/FastACL-Community
Hit with hundreds of Gbps of DDoS. Twice. So he built his own mitigation engine.
Peter-Paul Kurstjens built Sentry-Flow using FastNetMon's FastACL plugin for BGP FlowSpec on VPP. 81 automated tests per build. Not bad for a "non-developer."
fastnetmon.com/2026/09/15/w...
Peter-Paul Kurstjens built Sentry-Flow using FastNetMon's FastACL plugin for BGP FlowSpec on VPP. 81 automated tests per build. Not bad for a "non-developer."
fastnetmon.com/2026/09/15/w...
September 23, 2026 at 11:01 AM
Hit with hundreds of Gbps of DDoS. Twice. So he built his own mitigation engine.
Peter-Paul Kurstjens built Sentry-Flow using FastNetMon's FastACL plugin for BGP FlowSpec on VPP. 81 automated tests per build. Not bad for a "non-developer."
fastnetmon.com/2026/09/15/w...
Peter-Paul Kurstjens built Sentry-Flow using FastNetMon's FastACL plugin for BGP FlowSpec on VPP. 81 automated tests per build. Not bad for a "non-developer."
fastnetmon.com/2026/09/15/w...
Annual reminder: I'm running free projects for networking community - BGP feeds with bogons, FlowSpec, country/geo, full IPv4/IPv6 global table, RPKI RSes and AS112 sinkholes. All documented here: lukasz.bromirski.net/projects/ #bgp #as112 #anycast #freebsd #iosxr #xrv9000 #pushdastuff
projects
below you can see some of the community projects I created/actively maintaining:
AS 112 - world wide project to sinkhole RFC 1918 DNS traffic locally within countries/geos and avoid slamming DNS roo...
lukasz.bromirski.net
January 11, 2025 at 6:51 PM
Annual reminder: I'm running free projects for networking community - BGP feeds with bogons, FlowSpec, country/geo, full IPv4/IPv6 global table, RPKI RSes and AS112 sinkholes. All documented here: lukasz.bromirski.net/projects/ #bgp #as112 #anycast #freebsd #iosxr #xrv9000 #pushdastuff
March 30, 2026 at 2:30 PM
FastNetMon Advanced v2.0.376 (Apr 7, 2026)
PPPoE IPv6 parsing
Expanded sFlow counters
FlowSpec tracking + cleaner email notifications
& more!
Full details: fastnetmon.com/docs-fnm-advanced/fastnetmon-advanced-release-lifecycle/
#FastNetMon #Ubuntu #NetworkSecurity
PPPoE IPv6 parsing
Expanded sFlow counters
FlowSpec tracking + cleaner email notifications
& more!
Full details: fastnetmon.com/docs-fnm-advanced/fastnetmon-advanced-release-lifecycle/
#FastNetMon #Ubuntu #NetworkSecurity
April 9, 2026 at 11:01 AM
FastNetMon Advanced v2.0.376 (Apr 7, 2026)
PPPoE IPv6 parsing
Expanded sFlow counters
FlowSpec tracking + cleaner email notifications
& more!
Full details: fastnetmon.com/docs-fnm-advanced/fastnetmon-advanced-release-lifecycle/
#FastNetMon #Ubuntu #NetworkSecurity
PPPoE IPv6 parsing
Expanded sFlow counters
FlowSpec tracking + cleaner email notifications
& more!
Full details: fastnetmon.com/docs-fnm-advanced/fastnetmon-advanced-release-lifecycle/
#FastNetMon #Ubuntu #NetworkSecurity
🌏 Kentik is headed to APRICOT 2025!
📍 Booth 13 | Feb 24-26 | Selangor, Malaysia
Catch Kentik Field CTO @justinryburn.bsky.social on BGP Flowspec & DoS mitigation. Stop by to meet our team & see how Kentik powers real-time network observability!
See you there! #APRICOT2025 #Networking
📍 Booth 13 | Feb 24-26 | Selangor, Malaysia
Catch Kentik Field CTO @justinryburn.bsky.social on BGP Flowspec & DoS mitigation. Stop by to meet our team & see how Kentik powers real-time network observability!
See you there! #APRICOT2025 #Networking
February 18, 2025 at 6:09 PM
🌏 Kentik is headed to APRICOT 2025!
📍 Booth 13 | Feb 24-26 | Selangor, Malaysia
Catch Kentik Field CTO @justinryburn.bsky.social on BGP Flowspec & DoS mitigation. Stop by to meet our team & see how Kentik powers real-time network observability!
See you there! #APRICOT2025 #Networking
📍 Booth 13 | Feb 24-26 | Selangor, Malaysia
Catch Kentik Field CTO @justinryburn.bsky.social on BGP Flowspec & DoS mitigation. Stop by to meet our team & see how Kentik powers real-time network observability!
See you there! #APRICOT2025 #Networking
A scrubbing centre can't protect traffic it never sees. BGP Unicast, FlowSpec, or API integrations get it there. Something still needs to trigger diversion and withdraw it when the attack ends.
fastnetmon.com/ddos-scrubbing-centre-diversion/
#FastNetMon #BGP #DDoS
fastnetmon.com/ddos-scrubbing-centre-diversion/
#FastNetMon #BGP #DDoS
August 27, 2026 at 11:01 AM
A scrubbing centre can't protect traffic it never sees. BGP Unicast, FlowSpec, or API integrations get it there. Something still needs to trigger diversion and withdraw it when the attack ends.
fastnetmon.com/ddos-scrubbing-centre-diversion/
#FastNetMon #BGP #DDoS
fastnetmon.com/ddos-scrubbing-centre-diversion/
#FastNetMon #BGP #DDoS
Two FastNetMon Advanced releases in one week, both updates are available now.
2.0.381:https://fastnetmon.com/2026/07/13/fastnetmon-advanced-2-0-381/
2.0.382:https://fastnetmon.com/2026/07/20/fastnetmon-advanced-2-0-382/
#FastNetMon #BGP #FlowSpec #DDoS #NetworkSecurity #NetworkEngineering
2.0.381:https://fastnetmon.com/2026/07/13/fastnetmon-advanced-2-0-381/
2.0.382:https://fastnetmon.com/2026/07/20/fastnetmon-advanced-2-0-382/
#FastNetMon #BGP #FlowSpec #DDoS #NetworkSecurity #NetworkEngineering
August 3, 2026 at 10:34 AM
Two FastNetMon Advanced releases in one week, both updates are available now.
2.0.381:https://fastnetmon.com/2026/07/13/fastnetmon-advanced-2-0-381/
2.0.382:https://fastnetmon.com/2026/07/20/fastnetmon-advanced-2-0-382/
#FastNetMon #BGP #FlowSpec #DDoS #NetworkSecurity #NetworkEngineering
2.0.381:https://fastnetmon.com/2026/07/13/fastnetmon-advanced-2-0-381/
2.0.382:https://fastnetmon.com/2026/07/20/fastnetmon-advanced-2-0-382/
#FastNetMon #BGP #FlowSpec #DDoS #NetworkSecurity #NetworkEngineering
Анализируем сетевой трафик средних и крупных сетей с...
https://habr.com/ru/articles/909132/?utm_source=habrahabr&utm;_medium=rss&utm;_campaign=909132
#netflow #ipfix #sflow #postgresql #grafana #ddos #bgp #flowspec
Result Details
https://habr.com/ru/articles/909132/?utm_source=habrahabr&utm;_medium=rss&utm;_campaign=909132
#netflow #ipfix #sflow #postgresql #grafana #ddos #bgp #flowspec
Result Details
May 13, 2025 at 9:37 PM
Анализируем сетевой трафик средних и крупных сетей с...
https://habr.com/ru/articles/909132/?utm_source=habrahabr&utm;_medium=rss&utm;_campaign=909132
#netflow #ipfix #sflow #postgresql #grafana #ddos #bgp #flowspec
Result Details
https://habr.com/ru/articles/909132/?utm_source=habrahabr&utm;_medium=rss&utm;_campaign=909132
#netflow #ipfix #sflow #postgresql #grafana #ddos #bgp #flowspec
Result Details
BGP Flowspec is a mature protocol supported by the majority of telecom vendors, allowing you to mitigate the most dangerous volumetric DDoS attacks without the need for third-party DDoS scrubbing centres.
The ultimate weapon against DDoS — BGP Flowspec | APNIC Blog
Guest Post: How to filter malicious traffic directly at the network edge, without third-party scrubbing centres.
blog.apnic.net
September 20, 2024 at 1:05 PM
BGP Flowspec is a mature protocol supported by the majority of telecom vendors, allowing you to mitigate the most dangerous volumetric DDoS attacks without the need for third-party DDoS scrubbing centres.
I had the honor or speaking at the last #APRICOT25 on BGP Flowspec best practices. This blog is an overview of that topic. blog.apnic.net/2025/04/04/b...
'BGP Flowspec doesn't suck. We're just using it wrong' | APNIC Blog
Guest Post: How proper testing and best practices can unlock the true potential of BGP Flowspec.
blog.apnic.net
April 6, 2025 at 1:26 PM
I had the honor or speaking at the last #APRICOT25 on BGP Flowspec best practices. This blog is an overview of that topic. blog.apnic.net/2025/04/04/b...
Lexus LC500 sitting on bespoke ADV005 FLOWspec wheels. | #ADV1 #TheWheelIndustry #ADV1Wheels #Lexus #IC500 #Reels #Car
April 2, 2025 at 10:46 PM
Lexus LC500 sitting on bespoke ADV005 FLOWspec wheels. | #ADV1 #TheWheelIndustry #ADV1Wheels #Lexus #IC500 #Reels #Car
ここにマニュアルがありますが、BGP Flowspec、EVPNは未サポートだし、VXLAN、SRv6なんて(使ってるスイッチチップがサポートしてたとしても)いつ使えるようになるんですか？って感じなんですよね．．．
www.fortinet.com/jp/promos/fs...
www.fortinet.com/jp/promos/fs...
FortiSwitch-AXシリーズ（FS-AX）製品マニュアル
www.fortinet.com
November 16, 2025 at 3:13 PM
ここにマニュアルがありますが、BGP Flowspec、EVPNは未サポートだし、VXLAN、SRv6なんて(使ってるスイッチチップがサポートしてたとしても)いつ使えるようになるんですか？って感じなんですよね．．．
www.fortinet.com/jp/promos/fs...
www.fortinet.com/jp/promos/fs...
Pas de Foot à la télé ? Voici la raison technique (Règle Flowspec mal configurée chez Centurylink
ift.tt/3lvMtPD
ift.tt/3lvMtPD
February 6, 2025 at 6:32 PM
Pas de Foot à la télé ? Voici la raison technique (Règle Flowspec mal configurée chez Centurylink
ift.tt/3lvMtPD
ift.tt/3lvMtPD
Noction releases IRP v4.3 with Automatic Anomaly Detection! 🛡️ The new feature provides rapid, automated DDoS detection & mitigation using routing-native tools like BGP FlowSpec and RTBH to protect networks at the edge. #DDoS #BGP #NetOps #CyberSec...
Noction IRP v4.3 Launches with Automated DDoS Detection and Routing-Native Mitigation
Noction has released IRP v4.3, featuring Automatic Anomaly Detection (AAD) for rapid identification and mitigation of DDoS attacks using BGP FlowSpec and RTBH.
cyber.netsecops.io
January 17, 2026 at 5:08 PM
Blackholing (RTBH) and FlowSpec both mitigate DDoS attacks differently. RTBH drops all traffic for fast protection. FlowSpec filters only malicious traffic, preserving legitimate traffic. Use RTBH for speed, FlowSpec for precision.
#FastNetMon #BGP #FlowSpec #RTBH
#FastNetMon #BGP #FlowSpec #RTBH
June 30, 2026 at 11:29 AM
Blackholing (RTBH) and FlowSpec both mitigate DDoS attacks differently. RTBH drops all traffic for fast protection. FlowSpec filters only malicious traffic, preserving legitimate traffic. Use RTBH for speed, FlowSpec for precision.
#FastNetMon #BGP #FlowSpec #RTBH
#FastNetMon #BGP #FlowSpec #RTBH
People talk about FlowSpec being "precise" without ever showing what that precision looks like in practice. Here's the actual rule structure, the same one in our own documentation.
#FastNetMon #FlowSpec #BGP #NetworkEngineering
#FastNetMon #FlowSpec #BGP #NetworkEngineering
June 29, 2026 at 12:22 PM
People talk about FlowSpec being "precise" without ever showing what that precision looks like in practice. Here's the actual rule structure, the same one in our own documentation.
#FastNetMon #FlowSpec #BGP #NetworkEngineering
#FastNetMon #FlowSpec #BGP #NetworkEngineering
BGP FlowSpec is one of the most effective tools for automated DDoS mitigation...
FastNetMon Advanced adds full FlowSpec-based mitigation for Bison routers, even without native support, using an ACL/SSH integration layer.
Technical Doc: fastnetmon.com/docs-fnm-adv...
#BGPFlowSpec #DDoSmitigation
FastNetMon Advanced adds full FlowSpec-based mitigation for Bison routers, even without native support, using an ACL/SSH integration layer.
Technical Doc: fastnetmon.com/docs-fnm-adv...
#BGPFlowSpec #DDoSmitigation
March 30, 2026 at 11:00 AM
BGP FlowSpec is one of the most effective tools for automated DDoS mitigation...
FastNetMon Advanced adds full FlowSpec-based mitigation for Bison routers, even without native support, using an ACL/SSH integration layer.
Technical Doc: fastnetmon.com/docs-fnm-adv...
#BGPFlowSpec #DDoSmitigation
FastNetMon Advanced adds full FlowSpec-based mitigation for Bison routers, even without native support, using an ACL/SSH integration layer.
Technical Doc: fastnetmon.com/docs-fnm-adv...
#BGPFlowSpec #DDoSmitigation
Have you deployed FlowSpec in your network yet?
What blocked you — vendor support, hardware limits, operational risk, or “no time to change what’s working”?
Curious to hear real-world stories 👇
What blocked you — vendor support, hardware limits, operational risk, or “no time to change what’s working”?
Curious to hear real-world stories 👇
March 19, 2026 at 12:01 PM
Have you deployed FlowSpec in your network yet?
What blocked you — vendor support, hardware limits, operational risk, or “no time to change what’s working”?
Curious to hear real-world stories 👇
What blocked you — vendor support, hardware limits, operational risk, or “no time to change what’s working”?
Curious to hear real-world stories 👇
Want to go deeper into FlowSpec, Rotonda, OcNOS, and real-world DDoS mitigation stories?
We publish our engineering deep dives and deployment write-ups on the FastNetMon blog:
🔗 fastnetmon.com/blog/
We publish our engineering deep dives and deployment write-ups on the FastNetMon blog:
🔗 fastnetmon.com/blog/
FastNetMon Blog: DDoS News & Network Security Insights | FastNetMon Official site
FastNetMon Blog delivers expert DDoS news and network security insights. Stay ahead of evolving threats with research for network engineers.
fastnetmon.com
March 19, 2026 at 12:01 PM
Want to go deeper into FlowSpec, Rotonda, OcNOS, and real-world DDoS mitigation stories?
We publish our engineering deep dives and deployment write-ups on the FastNetMon blog:
🔗 fastnetmon.com/blog/
We publish our engineering deep dives and deployment write-ups on the FastNetMon blog:
🔗 fastnetmon.com/blog/
BGP FlowSpec is built into FastNetMon Advanced.
If you’re running whitebox/disaggregated architectures, integrating open routing, or tired of slow manual playbooks, FlowSpec is likely your next mitigation step.
If you’re running whitebox/disaggregated architectures, integrating open routing, or tired of slow manual playbooks, FlowSpec is likely your next mitigation step.
March 19, 2026 at 12:01 PM
BGP FlowSpec is built into FastNetMon Advanced.
If you’re running whitebox/disaggregated architectures, integrating open routing, or tired of slow manual playbooks, FlowSpec is likely your next mitigation step.
If you’re running whitebox/disaggregated architectures, integrating open routing, or tired of slow manual playbooks, FlowSpec is likely your next mitigation step.
In production today with FastNetMon, FlowSpec plugs into disaggregated, carrier-grade setups:
- Telemetry (sFlow/IPFIX) exported at line rate
- FastNetMon detects anomalies in real time
- FlowSpec rules fire automatically at the edge
- Legitimate traffic keeps flowing
- Telemetry (sFlow/IPFIX) exported at line rate
- FastNetMon detects anomalies in real time
- FlowSpec rules fire automatically at the edge
- Legitimate traffic keeps flowing
March 19, 2026 at 12:01 PM
In production today with FastNetMon, FlowSpec plugs into disaggregated, carrier-grade setups:
- Telemetry (sFlow/IPFIX) exported at line rate
- FastNetMon detects anomalies in real time
- FlowSpec rules fire automatically at the edge
- Legitimate traffic keeps flowing
- Telemetry (sFlow/IPFIX) exported at line rate
- FastNetMon detects anomalies in real time
- FlowSpec rules fire automatically at the edge
- Legitimate traffic keeps flowing
Where this is heading:
FlowSpec is moving deeper into open source and disaggregated networking.
We’re collaborating on modern routing stacks so FlowSpec isn’t locked behind a single vendor.
FlowSpec is moving deeper into open source and disaggregated networking.
We’re collaborating on modern routing stacks so FlowSpec isn’t locked behind a single vendor.
March 19, 2026 at 12:01 PM
Where this is heading:
FlowSpec is moving deeper into open source and disaggregated networking.
We’re collaborating on modern routing stacks so FlowSpec isn’t locked behind a single vendor.
FlowSpec is moving deeper into open source and disaggregated networking.
We’re collaborating on modern routing stacks so FlowSpec isn’t locked behind a single vendor.