Enforcement occurs on the peering router. Standards-based BGP FlowSpec supplies granular L3-L4 traffic matches and actions, while DNOS can add local fixed-offset byte-pattern matching for precise mitigation without application-layer parsing. Automation, sensitivity and policy remain under customer control.
In this white paper, we cover
- the architectural model
- the inline DDoS mitigation use case
- how bidirectional threat-intelligence enforcement can extend protection across both sides of the service provider edge
Download
