BGPSec 03 Source Based RTBH Concepts and Demo (Remotely Triggered Black Hole Filtering)

Описание: This video is part of the DP Service Provider Technology series falling within the service provider security domain. The content is geared towards CCIE and JNCIE candidates although each technology is covered from beginning to end independently.

Service Provider Technology Series -    • BGPSec 01 Introduction to Remotely Trigger...  
BGP Security Series -    • BGPSec 01 Introduction to Remotely Trigger...  

Decoding Packets - https://decodingpackets.info

This video is covers Source based Remotely Triggered Black Hole Filtering (RTBH or S/RTBH) in depth and provides a live demo. Both IPv4 and IPv6 filtering techniques are covered.

-Why Source Based RTBH?
The need for an RTBH Trigger Router
Unicast Reverse Path Forwarding Check - uRPF check
uRPF check in Loose Mode with Discard Route option

RTBH topology overview
RTBH with BGP next-hop attribute manipulation using BGP Trigger router
RTBH with BGP community attribute signaling using BGP Trigger router

The concepts covered should be sufficient for both CCIE-SP (CCIE SP) and JNCIE-SP (JNCIE SP) Candidates.
Downloads - https://github.com/decodingpackets/dp...

References:

RFC 3704 - https://tools.ietf.org/html/rfc3704
RFC 3882 - https://tools.ietf.org/html/rfc3882
RFC 5635 - https://tools.ietf.org/html/rfc5635
RFC 6666 - https://tools.ietf.org/html/rfc6666
RFC 7999 - https://tools.ietf.org/html/rfc7999
Cisco White Paper on Source and Destination based RTBH- https://www.cisco.com/c/dam/en/us/pro...
Junos uRPF Implementation - https://www.juniper.net/documentation...
Multicast RPF Check Refresher - https://www.youtube.com/edit?o=U&vide...