cablelabs / transparent-security

Transparent Security is a solution for identify the source devices of a DDoS attack and mitigates the attack in the customer premises or the access network. This solution leverages a P4 based programmable data plane for add in-band network telemetry (INT) for device identification and in-band mitigation.
https://www.cablelabs.com/vaccinate-your-network-to-prevent-the-spread-of-ddos-attacks
Apache License 2.0
32 stars 4 forks source link

Look into evaluating drop reports as part of the pkt-flood scenario. #403

Closed spisarski closed 3 years ago

spisarski commented 3 years ago

Need to correlate the hash value contained on drop reports back to packet telemetry reports while keeping count of the dropped packets so the attack can be un-mitigated after n reports.

We may need to specify a secondary port value for sending drop reports as Siddhi may not be able to differentiate between the 2 distinct streams properly to do what we need.