Pavel's blog about underlying Internet technologies

Pavel Odintsov

Using IDE CD drive as poor man audio player

My very first computer based on Intel Celeron 266 wasn't able to play mp3 music and computer game in same time. mp3 is pretty computationally heavy and used significant amount of very scarce CPU resource. The only way to listen audio during game was to use CD audio

Multiple inconsistencies in Linux Kernel 6.2 when SO_ATTACH_REUSEPORT_CBPF used with UDP sockets

I spent last week in researching ways how to load balance traffic between REUSE_PORT sockets with #BPF microcode. You may read part 1 here and part 2 here. Both articles accompanied with complete source code example licensed under Apache 2 license. Sadly SO_ATTACH_REUSEPORT_CBPF capability has mostly

Rocky road towards ultimate UDP server with BPF based load balancing on Linux: part 2

In first part of this article we evaluated multiple possible options to load balance UDP traffic between multiple sockets using SO_REUSEPORT capability. Due to nature of traffic in my particular case (majority of traffic is coming from single device) standard Linux kernel load balancing algorithm did not distribute it

How to capture 650.000 packets per second on $80 USD ARM64 SBC and USB-C network adaptor

If you're not familiar with my previous articles I would recommend this one which explains how can we capture 10 Millions packets per second on Linux without any third part libraries. In this article I'll step away from my usual habit of working with top tier

Rocky road towards ultimate UDP server with BPF based load balancing on Linux: part 1

This article will summarise decade long experience accumulated during development of FastNetMon, high performance lightning fast DDoS detection tool with open source core. To detect DDoS attack in Telecom network we need to see traffic which traverses network and we have multiple protocols for that purpose: * IPFIX * Netflow v9 * sFlow

FastNetMon Community on the way from PoC to MVP

I’m Pavel, I’m CTO and co-founder of FastNetMon LTD, London, 🇬🇧 FastNetMon Community is an open source DDoS detection tool licensed under GPLv2 terms. In this article I would like to tell you about early stages of FastNetMon Community development. I hope it will be a very valuable story

Best way to get default outgoing IP address on Linux

There are multiple cases where you may need to know which IPv4 or IPv6 address from all IP addresses available on your machine will be used for outgoing connections to remote hosts. Generic Linux machine may have multiple network interfaces and each of them may have multiple IPv4 or IPv6

FastNetMon in search of perfect database for configuration and state storage

Hello! I’m Pavel and I’m CTO and co-founder of FastNetMon LTD, London, 🇬🇧. We’re cyber security software vendor and we develop DDoS 🎯 detection and mitigation platform for Telecoms. Our 🏢 very first product was completely free open source on premise DDoS 🚨 detection platform called FastNetMon Community and you can

boost::unordered map is a new king of data structures

One lovely London morning I was wandering around social media and noticed some activity about new boost::unordered_map which is the part of Boost 1.80 release. Why do I care? I’m CTO of FastNetMon and we’re one of the fastest products on market of DDoS detection

Data structures of DDoS detection

For quite long time DDoS detection and mitigation area was like magic with extremely limited access to information about algorithms used by such products. Almost all technologies were proprietary and their algorithms were patented. At FastNetMon we do our best to explain all technical aspects behind DDoS detection logic. I’