In first part of this article we evaluated multiple possible options to load balance UDP traffic between multiple sockets using SO_REUSEPORT capability. Due to nature of traffic in my particular case (majority of traffic is coming from single device) standard Linux kernel load balancing algorithm did not distribute it

If you're not familiar with my previous articles I would recommend this one which explains how can we capture 10 Millions packets per second on Linux without any third part libraries. In this article I'll step away from my usual habit of working with top tier

This article will summarise decade long experience accumulated during development of FastNetMon, high performance lightning fast DDoS detection tool with open source core. To detect DDoS attack in Telecom network we need to see traffic which traverses network and we have multiple protocols for that purpose: * IPFIX * Netflow v9 * sFlow

I’m Pavel, I’m CTO and co-founder of FastNetMon LTD, London, 🇬🇧 FastNetMon Community is an open source DDoS detection tool licensed under GPLv2 terms. In this article I would like to tell you about early stages of FastNetMon Community development. I hope it will be a very valuable story

There are multiple cases where you may need to know which IPv4 or IPv6 address from all IP addresses available on your machine will be used for outgoing connections to remote hosts. Generic Linux machine may have multiple network interfaces and each of them may have multiple IPv4 or IPv6

Hello! I’m Pavel and I’m CTO and co-founder of FastNetMon LTD, London, 🇬🇧. We’re cyber security software vendor and we develop DDoS 🎯 detection and mitigation platform for Telecoms. Our 🏢 very first product was completely free open source on premise DDoS 🚨 detection platform called FastNetMon Community and you can

One lovely London morning I was wandering around social media and noticed some activity about new boost::unordered_map which is the part of Boost 1.80 release. Why do I care? I’m CTO of FastNetMon and we’re one of the fastest products on market of DDoS detection

For quite long time DDoS detection and mitigation area was like magic with extremely limited access to information about algorithms used by such products. Almost all technologies were proprietary and their algorithms were patented. At FastNetMon we do our best to explain all technical aspects behind DDoS detection logic. I’

At previous stages of my career I spent 5 years working with the DNS protocol and during this time I have collected a fairly large number of ways to shoot myself in the foot in a seemingly empty place. DNS is great for the task of bringing visitors to your

My article will tell you how to receive 10 million packets per second without using any third party libraries such as Netmap, PF_RING, DPDK and others. We will do this using the usual Linux kernel version 3.16 and a certain amount of code in C and C ++. The