Advanced Blackholing

Drop DDoS traffic

To help our customers mitigate the effects of Distributed Denial of Service (DDoS) attacks against their networks, we offer customer-triggered Advanced Blackholing (ADV_BH). 

The current 1-IX Blackholing can completely block traffic to destination IP addresses under attack. However, this takes the destination completely offline and means the attacker wins.

With the Advanced Blackholing service, you can now block specific types of IP packets, including TCP / UDP / ICMP source and destination ports.

Advanced Blackholing requires an initial analysis of the attack. You need to identify the target IP(s) and, ideally, the exact traffic signature (protocol, ports).

Most DoS/DDoS attacks are based on a single traffic vector, such as UDP or TCP traffic on specific ports. After identifying the attack vector, select the appropriate community or communities from the tables below.

Blackholing via the route servers

1. Customers advertise their IP/IPv6 prefix(es) tagged with the BGP BGP ADV_BH Community (target:50263:42xxxxxxxx) or (50263:667..677)
2. Accepted prefix length by the 1-IX EU Route-Servers is /32 for IPv4 (only if ADV_BH is set)
3. Accepted prefix length by the 1-IX EU Route-Servers is /128 for IPv6 (only if ADV_BH is set)
4. Prefix validation (RIR and RPKI filtering) is applied as usual, to prevent unauthorized Blackholing
5. The 1-IX EU Route Servers rewrite the next-hop of the advertised IP/IPv6 prefix(es) to the address of the ADV_BH next-hop 
6. Then the 1-IX EU Route Servers advertise this prefixes to all peers
7. All of the peers MUST accept /32 for IPv4 and /128 for IPv6 with BGP ADV_BH Community
8. DV_BH next-hops have a unique MAC addresses in each location (determined by ARP/NDP)
9. Then malicious traffic is dropped inside 1-IX EU switching platform while legitimate traffic continues to flow

If you think any additional blocking rules would be useful, don’t hesitate to reach out to us at abh@1-iх.eu  - your feedback helps us improve the service.

Table of Rules