flowwler - DDoS Detection and Mitigation with Flow Data and BGP Flow Spec
I had a problem: I needed to detect DDoS attacks in a network and react to them automatically. I looked at the tools that were available, but none of them solved it for me. Especially the escalation, and changing the mitigation as an attack evolves, could not be adapted in most solutions. So I decided to build my own solution: flowwler. If your network could talk, it would say: “I can see the attack. I just need help reacting to it.” That is the idea behind flowwler. Its design goal is simple logic, quick decisions and clear escalation levels, without overloading the operator. ...