This chapter builds upon the last by providing a concrete example of stateless firewall filter and policer usage in the context of a routing engine protection filter, and also demonstrates the new Trio-specific DDoS prevention feature that hardens the already robust Junos control plane with no explicit configuration required.
The RE protection topics discussed include:
IPv4 and IPv6 control plane protection filter case study
DDoS feature overview
DDoS protection case study
Mitigating DDoS with BGP flow-specification
BGP flow-specification case study