Automatically detect and mitigate DDoS attacks

Automated DDoS detection/mitigation

IRP’s Threat Mitigation feature continuously analyzes traffic using router telemetry and control capabilities such as NetFlow, sFlow, and BGP to detect abnormal traffic behavior in seconds. In addition to configurable thresholds, Automatic Anomaly Detection identifies sustained deviations from normal traffic baselines that may indicate volumetric or protocol-level attacks. This approach enables fast, scalable protection for high-traffic networks with minimal human intervention, supported by a user-friendly interface and flexible alerting options.

BGP FlowSpec DDoS mitigation

Block malicious traffic using IRP’s automated BGP FlowSpec DDoS mitigation capability. Rapidly deploy and propagate threat mitigation policies across a large number of BGP peer routers to minimize the effects of DDoS attacks on your network. Apply new, modify existing, or cancel mitigation rules on the fly.

BGP Blackhole DDoS mitigation

IRP’s Threat Mitigation feature is compatible with all major BGP implementations. For large-scale attacks that exceed available capacity, Remote Triggered Blackholing (RTBH) is automatically activated to block attack traffic upstream before it reaches the network. RTBH can be used alongside FlowSpec as a higher-impact mitigation method when attack volume continues to rise. By combining anomaly detection with routing-native mitigation, IRP helps maintain network uptime and stability even during sophisticated DDoS attacks.