I created a BGP-based blackhole system that you can set up in minutes

About I created a BGP-based blackhole system that you can set up in minutes

Real BGP blackholing (RTBH) for single-router networks. No multihoming, no public ASN required. $59/mo, 14-day free trial, no card required, auto-approved.

In the maker’s words

Hey friends, I've been working on this idea since 2019, and wanted to share it and see who might be interested. I built a BGP network full of nodes that collect threat data, put it on a blockchain, and put it into a BGP community that anyone can peer with over GRE. The external network ASN is AS23026. Basically, you sign up on the website -- you can create an account with your email or with peeringdb or a thoughtwave account, set up a private ASN and it spits out a router config that you can use to start blackholing routes. I have been using it for months now on my edge router (AS54380) and it has cut SSH attacks down drastically. It doesn't do volumetric protection against DDoS, but it will give you protection against brute force attacks. It ingest spamhaus, a bunch of other feeds as well as fail2ban from participants and also our own attack intelligence. It's $59/month after the two we…

Where people found it

• Hacker NewsShow HN: I created a BGP-based blackhole system that you can set up in minutes7 points10 comments4 days ago