{"guid":"79720795-6ae6-50ef-ab4b-a1ef4472ab1d","title":"Protect your edge, BGP security made simple","subtitle":"","slug":"denog16-4016-protect_your_edge_bgp_security_made_simple","link":"https://c3voc.de","description":"Pioneers of the internet are putting great effort in protecting their networks by establishing strict filtering, trying to eliminate the last holes in their walls and using third-party DDoS mitigation solutions. However, we have seen avoidable route leaks and a tremendous increase in DDoS attacks in the last years. Unfortunately, the majority of ISPs in the world still filter on max-prefix limits at most and hope for the best. We at SysEleven have combined common filter best-practices with a self-made generator for prefix-filters and RPKI to establish strict filtering at the edge. Additionally, we have integrated a simple open-source tool for detecting and mitigating volumetric DDoS attacks. And by adding FlowSpec, the maximum attack bandwidth is no longer limited to our edge capacity. Altogether, this is a concept that has proven his capability in the past. I believe that every ISP who shares his individual and even non-perfect concept enables others to protect themselves better and finally makes the internet more secure. Therefore, I would like to present our solution as a thought-provoking impulse and give an exclusive insight into our Juniper based network.","original_language":"eng","persons":["Theo Voss"],"tags":["denog16"],"view_count":591,"promoted":false,"date":"2016-11-24T00:00:00.000+01:00","release_date":"2016-12-11T01:00:00.000+01:00","updated_at":"2026-02-11T16:30:11.574+01:00","length":1576,"duration":1576,"thumb_url":"https://static.media.ccc.de/media/events/denog/denog8/4016-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/denog/denog8/4016-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/denog/denog8/79720795-6ae6-50ef-ab4b-a1ef4472ab1d-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/denog/denog8/79720795-6ae6-50ef-ab4b-a1ef4472ab1d-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/denog16-4016-protect_your_edge_bgp_security_made_simple","url":"https://api.media.ccc.de/public/events/79720795-6ae6-50ef-ab4b-a1ef4472ab1d","conference_title":"DENOG8","conference_url":"https://api.media.ccc.de/public/conferences/denog8","related":[{"event_id":2775,"event_guid":"3d7c4060-7e31-11e5-b91e-c23ca85e9bc3","weight":6},{"event_id":2970,"event_guid":"d9ed8b4a-8897-46f8-b2e2-38cbf57aa5d6","weight":6},{"event_id":2972,"event_guid":"e328de69-f963-4bff-9018-ffc5501ce1bf","weight":8},{"event_id":3586,"event_guid":"cd6ab67f-ea8b-5119-af38-ba7c308f8da2","weight":9},{"event_id":3588,"event_guid":"93e26933-9bec-5ba5-b792-b5b576704a5c","weight":11},{"event_id":3590,"event_guid":"8edd7c4d-0b8e-57d9-8e38-df11f1434e22","weight":11},{"event_id":3774,"event_guid":"a26a0d23-549d-5bd6-8f1e-9803628d5850","weight":17},{"event_id":3777,"event_guid":"4cd439a6-58a6-584b-a0a8-a6e0ca473b46","weight":8},{"event_id":3779,"event_guid":"66b1739a-588b-569f-9544-8084f325e235","weight":9},{"event_id":3781,"event_guid":"e7e8f8ab-77c0-5102-b418-a296ded45215","weight":8}],"recordings":[{"size":23,"length":1568,"mime_type":"audio/mpeg","language":"eng","filename":"denog16-4016-eng-Protect_your_edge_BGP_security_made_simple.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2016-12-11T14:30:19.950+01:00","recording_url":"https://cdn.media.ccc.de/events/denog/denog8/mp3/denog16-4016-eng-Protect_your_edge_BGP_security_made_simple.mp3","url":"https://api.media.ccc.de/public/recordings/13463","event_url":"https://api.media.ccc.de/public/events/79720795-6ae6-50ef-ab4b-a1ef4472ab1d","conference_url":"https://api.media.ccc.de/public/conferences/denog8"},{"size":160,"length":1576,"mime_type":"video/mp4","language":"eng","filename":"denog16-4016-eng-Protect_your_edge_BGP_security_made_simple_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-11T13:48:23.173+01:00","recording_url":"https://cdn.media.ccc.de/events/denog/denog8/h264-hd/denog16-4016-eng-Protect_your_edge_BGP_security_made_simple_hd.mp4","url":"https://api.media.ccc.de/public/recordings/13446","event_url":"https://api.media.ccc.de/public/events/79720795-6ae6-50ef-ab4b-a1ef4472ab1d","conference_url":"https://api.media.ccc.de/public/conferences/denog8"},{"size":44,"length":1576,"mime_type":"video/mp4","language":"eng","filename":"denog16-4016-eng-Protect_your_edge_BGP_security_made_simple_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-12-11T14:29:44.375+01:00","recording_url":"https://cdn.media.ccc.de/events/denog/denog8/h264-sd/denog16-4016-eng-Protect_your_edge_BGP_security_made_simple_sd.mp4","url":"https://api.media.ccc.de/public/recordings/13462","event_url":"https://api.media.ccc.de/public/events/79720795-6ae6-50ef-ab4b-a1ef4472ab1d","conference_url":"https://api.media.ccc.de/public/conferences/denog8"},{"size":20,"length":1568,"mime_type":"audio/opus","language":"eng","filename":"denog16-4016-eng-Protect_your_edge_BGP_security_made_simple.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2016-12-11T14:31:25.031+01:00","recording_url":"https://cdn.media.ccc.de/events/denog/denog8/opus/denog16-4016-eng-Protect_your_edge_BGP_security_made_simple.opus","url":"https://api.media.ccc.de/public/recordings/13464","event_url":"https://api.media.ccc.de/public/events/79720795-6ae6-50ef-ab4b-a1ef4472ab1d","conference_url":"https://api.media.ccc.de/public/conferences/denog8"},{"size":48,"length":1576,"mime_type":"video/webm","language":"eng","filename":"denog16-4016-eng-Protect_your_edge_BGP_security_made_simple_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-12-11T14:51:05.318+01:00","recording_url":"https://cdn.media.ccc.de/events/denog/denog8/webm-sd/denog16-4016-eng-Protect_your_edge_BGP_security_made_simple_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/13470","event_url":"https://api.media.ccc.de/public/events/79720795-6ae6-50ef-ab4b-a1ef4472ab1d","conference_url":"https://api.media.ccc.de/public/conferences/denog8"},{"size":137,"length":1576,"mime_type":"video/webm","language":"eng","filename":"denog16-4016-eng-Protect_your_edge_BGP_security_made_simple_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-11T16:45:57.743+01:00","recording_url":"https://cdn.media.ccc.de/events/denog/denog8/webm-hd/denog16-4016-eng-Protect_your_edge_BGP_security_made_simple_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/13480","event_url":"https://api.media.ccc.de/public/events/79720795-6ae6-50ef-ab4b-a1ef4472ab1d","conference_url":"https://api.media.ccc.de/public/conferences/denog8"}]}