Exploring Actions Taken on Traffic Triggering Flow Spec Rules for DDoS Mitigation

Flowspec can be thought of as a way of distributing basic firewall functionality into BGP. In the last decade, it’s become a popular way to mitigate the effects of a DDoS attack by filtering incoming BGP Update Messages. In this episode, Justin Ryburn, Field CTO at Kentik, explains how Flowspec works, how it’s implemented, and why it hasn’t been adopted quite as much as we expected it to be.