Sounds like a job for your providers. On Tue, Jul 18, 2017 at 3:21 PM, Dev <[email protected]> wrote:
> What is the feasibility of building a DDoS protection box out of a bare > Linux server running a dual-10G/40G NIC inline with iptables handling junk > traffic, and then a third eth for management? Seems like the 10G/40G card > could help scrub traffic before it hits your core? Has anyone built one? > I’ve heard about CCR’s, but my experience with MT has been...weird, they > just do weird stuff from time to time, YMMV, etc. etc., but I’ve had better > luck with Cisco and the usual suspects. It seems like a purpose built > vanilla Linux box would be easily upgradeable, universally supported with > vanilla kernel support, etc. and you could just tweak stuff until you got > it dialed, no?
