一位开发者在Hacker News上展示了自2019年开发的基于BGP技术的黑洞防护系统，该系统可在数分钟内完成配置部署。1这套系统通过汇聚来自Spamhaus、fail2ban参与者以及开发者自有渠道的威胁数据，利用BGP社区对等机制向用户提供防护能力。1用户可通过配置路由器规则来防御暴力破解攻击，开发者在其边界路由器上的实际部署显示，该系统已"大幅降低了SSH攻击"。1
该服务按月订阅收费，定价为59美元/月，用户可在两周试用期后随时取消。1值得注意的是，该系统专门针对暴力破解等应用层攻击提供防护，但不提供DDoS流量容量防护。1开发者的部署使用了AS54380作为内部自治系统号，系统外部对等则通过AS23026进行。1
A developer has introduced a BGP-based blackhole protection system that aggregates threat intelligence and delivers protection through BGP community peering 1. The system, which began development in 2019, enables users to configure routing defenses against brute-force attacks and has been actively deployed on the creator's border router 1. According to the developer, the system "has cut SSH attacks down drastically" 1.
The service operates on a subscription model priced at $59 per month, with a two-week trial period followed by cancellation flexibility 1. The infrastructure utilizes the developer's ASN (AS54380) alongside an external ASN (AS23026) 1. The blackhole system integrates threat data from multiple sources including Spamhaus and fail2ban participant datasets, supplemented by the developer's proprietary attack intelligence 1. However, the service does not provide DDoS capacity protection and is limited to defending against brute-force attacks rather than volumetric threats 1.
评论
还没有评论，欢迎留下第一条。