setecastronomyinc.com

Show HN: I created a BGP-based blackhole system that you can set up in minutes

jkalbfeld · 6 points · 2 comments · 18시간 전 · Open original

Hey friends, I've been working on this idea since 2019, and wanted to share it and see who might be interested. I built a BGP network full of nodes that collect threat data, put it on a blockchain, and put it into a BGP community that anyone can peer with over GRE. The external network ASN is AS23026. Basically, you sign up on the website -- you can create an account with your email or with peeringdb or a thoughtwave account, set up a private ASN and it spits out a router config that you can use to start blackholing routes. I have been using it for months now on my edge router (AS54380) and it has cut SSH attacks down drastically. It doesn't do volumetric protection against DDoS, but it will give you protection against brute force attacks. It ingest spamhaus, a bunch of other feeds as well as fail2ban from participants and also our own attack intelligence. It's $59/month after the two week trial, and you can cancel at any time. I have a support ticket system. Would love to get some feedback.

Comments

3 preview comments · loading full thread
smw59분 전

I guess the real question here is what happens if my service _does_ get attacked by a volumetric DDoS? Do you immediately stop advertising?

RationPhantoms1시간 전

Your 4. is incorrect. Traffic does not get dropped upstream.

fanthus12시간 전

[deleted]