gatekeeper
gatekeeper copied to clipboard
AltraMayor
The first open-source DDoS protection system
This pull request replaces the calls to the LPM iterator present in Gatekeeper's custom DPDK with a Routing Information Base (RIB). This is one step toward no longer having a...
Once Gatekeeper v1.1 is out, the major roadblock for Gatekeeper to use a mainline version of DPDK is the need to iterate LPM tables for IPv4 and IPv6. There's no...
This message has showed up twice in the logs during the current testing period of version 1.1: ``` PANIC in rd_fill_getroute_reply(): Invalid FIB action (6) in FIB while being processed...
I simulated /8 prefix fib routes, the number of prefixes was 224, and then launched a syn+ack attack,Use a random source “--rand-source ”. After more than 40 minutes, the GK...
Having a command to test BPF programs would ease the development of new BPF programs for Gatekeeper since this command can 1. Verify that both functions (i.e. "init" and "pkt")...
How to make the update of the policy take effect immediately, we found that the policy has to wait for expire_sec to expire and enter the next round, and then...
gt_lpm_ud does not exist in version 1.0.0, gt_lpm_ud expected, got number appears after upgrading to 1.1.0
The current flow tables use [DPDK hash library](http://doc.dpdk.org/guides/prog_guide/hash_lib.html). While this library provided Gatekeeper with a good starting point, it has some edges that conflict with the way GK blocks use...
It is common for BGP sessions to be deployed with non-routable IP addresses to protect routers from direct attacks. In that scenario, an administrative IP address from the uplink provider's...
Gatekeeper 1.1.0 deployment The following error occurs, the GK server cannot be initialized /lua/gk.lua:92: 'struct gk_config' has no member named 'fib_dump_batch_size'
Metadata
Owner
Metadata
The first open-source DDoS protection system