18.12.2016 Views

XDP – eXpress Data Path

xdp_intro_and_use_cases_sep2016

xdp_intro_and_use_cases_sep2016

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

<strong>XDP</strong>: Types of DDoS<br />

●<br />

DDoS filtering types:<br />

● Best suited for packet based filter decisions (L2 or L3)<br />

●<br />

eBPF could store historic state<br />

●<br />

●<br />

●<br />

Arbitrary advanced based on eBPF expressiveness<br />

Use another tool for application layer attacks<br />

Really fast!<br />

●<br />

Realize: Can do wirespeed filtering of small packets<br />

●<br />

Fast enough for?<br />

●<br />

Filtering DoS volume attacks on network edge?<br />

16/23<br />

<strong>XDP</strong> <strong>–</strong> <strong>eXpress</strong> <strong>Data</strong> <strong>Path</strong>

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!