Your own

managed

network

black

hole

Change management is often slow and consumes valuable company resources. Keeping the filters on the edge of your network is a time consuming process. Automate this task by receiving filters over BGP and focus on what is important for your organization.

Available filters include networks identified as threats, spammers, TOR exit nodes, bogons, botnet C&C nodes, whole countries, selected companies, ASNs, pornographic content and others.

Our filters are available in both IPv4 and IPv6 and they are updated daily. Special care is taken so that we never send you the default route or IP blocks that would compromise your network.

The setup is quick and easy. Configuration templates are provided for most popular router platforms including Cisco, Juniper and RouterBoard (Mikrotik).

create a profile, select one or more filters that you want to receive and configure your edge routers to establish BGP peering with our route servers

Using BGP your edge routers receive prefixes from the filter(s) that you selected. The received prefixes have a well-known BGP community "blackhole" attached to them (65535:666 per RFC 7999).

Your edge routers automatically discard traffic destined for prefixes that they receive from BGP Filters, effectively blocking all communication to those networks

(optional) you can elevate Network Black Hole into a DDoS protection for your network by applying uRPF (unicast reverse path forwarding) check and dropping traffic to/from the networks listed in the filters you selected