This chapter builds upon the last by providing a concrete example of stateless firewall filter and policer usage in the context of a routing engine protection filter, and also demonstrates the new Trio-specific DDoS prevention feature that hardens the already robust Junos control plane with no explicit configuration required.
The RE protection topics discussed include:
IPv4 and IPv6 control plane protection filter case study
DDoS feature overview
DDoS protection case study
Mitigating DDoS with BGP flow-specification
BGP flow-specification case study
Get Juniper MX Series now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.