https://docs.mitigator.ru/v26.04/en/tags/flow/ Recent content in Flow on BIFIT Mitigator Hugo -- gohugo.io en https://docs.mitigator.ru/v26.04/en/kb/deploy/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.04/en/kb/deploy/ Terminology and methods for implementing the MITIGATOR DDoS protection system into the network. External and Internal Networks Logically MITIGATOR is connected to two networks: External network (external) – the network from which the traffic that needs cleaning comes; Internal network (internal) – the network in which the protected resources are located. Traffic from the external network – traffic coming to MITIGATOR from the external network. Consists of attack traffic and legitimate traffic. https://docs.mitigator.ru/v26.04/en/kb/bgp/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.04/en/kb/bgp/ Info Update coming soon. MITIGATOR supports various BGP communication scenarios. Each cluster instance can function as an independent BGP speaker, announce prefixes and send and receive FlowSpec rules. Memo Information about all aspects of BGP interaction settings is given below. Local BGP Parameters Local BGP parameters should be defined for each cluster instance and each instance must be given permission to establish BGP connections with its BGP neighbors. BGP Neighbors MITIGATOR instances can establish BGP connections with other network devices defined in the system as BGP neighbors. https://docs.mitigator.ru/v26.04/en/integrate/fastnetmon/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.04/en/integrate/fastnetmon/ The following protection scheme is described: FastNetMon analyzes traffic, detects attacks and calls the script at the beginning and end of attacks. The script analyzes the FastNetMon report and switches the protection status on MITIGATOR depending on the characteristics of the attack. FastNetMon Overview FastNetMon detects the beginning, the end and the characteristics of the attack by analyzing traffic that can be taken from network interfaces or come from aggregators (NetFlow, sFlow).