For quite long time DDoS detection and mitigation area was like magic with extremely limited access to information about algorithms used by such products. Almost all technologies were proprietary and their algorithms were patented. At FastNetMon we do our best to explain all technical aspects behind DDoS detection logic. I’

At previous stages of my career I spent 5 years working with the DNS protocol and during this time I have collected a fairly large number of ways to shoot myself in the foot in a seemingly empty place. DNS is great for the task of bringing visitors to your

My article will tell you how to receive 10 million packets per second without using any third party libraries such as Netmap, PF_RING, DPDK and others. We will do this using the usual Linux kernel version 3.16 and a certain amount of code in C and C ++. The

In this article I’ll try to make some performance evaluation of Patricia tree for purpose of IP address lookup in list of prefixes in C and C++ languages. Briefly, Patricia tree can help us to confirm that IP address 10.0.0.1 belongs or not to list of

In this blog post I'll cover pretty curious behaviour of IPFIX protocol on Juniper MX 204 boxes with JunOS 18.2R3-S6.5. This protocol is industry standard for exporting traffic observed by carrier grade routers or switches. NB! After followup investigation it was confirmed that issue was caused

To prove point that IPv6 is ready for production use I've been using IPv6 only setup on my Ubuntu PC for more then 4 months. To access legacy IPv4 Internet I use NAT64 gateway based on Tayga deployed on RockPro64 SBC in my cupboard: Most of the apps

At FastNetMon we work with UDP based protocols such us Netflow, IPFIX and sFlow on daily basis. These protocols are used by great variety of network equipment vendors to send information about traffic observed by network device to monitoring software. Today our technical support team received report from customer about

For my work PC with Ubuntu Linux 22.04 LTS I use only IPv6 with my own NAT64 gateway which I run on RockPro64  to access resources without support for IPv6. Today I spent morning to enable native IPv6 for Google Cloud account we use for testing. Sadly I faced

Intro Hey! I'm Pavel from London, I'm CTO of FastNetMon and we run DDoS attack detection with on premise installations in 146 countries. This post was inspired by GitHub conversation which was triggered by Clickhouse's team decision to start asking for CPU feature called