Practical Network Scanning

Remotely triggered black hole routing (RTBH)

Do you recall days when network admins used to call internet service providers to mitigate DDoS attacks? Remotely-Triggered Black Hole (RTBH) routing is an interesting application of Border Gateway Protocol (BGP) as a security tool within service provider networks. One common use for RTBH is mitigation of DDoS attacks. RTBH provides two methods:

• Source-based
• Destination-based

The basic approach is to either drop all traffic from the source or to drop all traffic to the destination. This could be both wanted and unwanted traffic. At this point, we do understand that RTBH routing is a technique that can be used to protect from DDoS attacks. Let's discuss how it works to protect your network.