[j-nsp] DDoS protection for J-series and SRX

[James Howlett]

Hello,

I think I can't use screen on my J-series in 9.x software / router context.
Will SRX be able to handle it alone?

all best,
jim

Date: Thu, 11 Apr 2013 10:10:18 +0100
Subject: Re: [j-nsp] DDoS protection for J-series and SRX
From: mark at deimark.net
To: jim.howlett at outlook.com
CC: juniper-nsp at puck.nether.net

Have a look at the screen options on both kits, we can apply basic DDoS protection there and limit stuff like max connections over a short period etc



On 11 April 2013 09:57, James Howlett <jim.howlett at outlook.com> wrote:

Hello,



I have a small network with J6350 as a border router (BGP) and two SRX240H in a cluster.

Since few days my network is a victim of DDoS attacks. Majority of them are high pps count attacks.

Are there any methods to protect my network against such attacks. My J-series can handle quite a lot of pps, but my SRX die after getting more than 8000 new sessions per second.



Is there anything i can do here?



Regards,

jim



_______________________________________________

juniper-nsp mailing list juniper-nsp at puck.nether.net

https://puck.nether.net/mailman/listinfo/juniper-nsp