Cloud Network Services
Cloud DDoS Scrubbing: How Traffic Diversion Works
Behind the scenes of BGP-based DDoS mitigation.
Infivate Networks Team 1 min read
Diversion via BGP
When an attack is detected, the protected prefix is announced from the scrubbing provider, attracting traffic to cleaning centres.
Clean traffic return
Clean traffic is delivered back through tunnels or direct interconnects.
Requirements
- Prefixes of /24 (IPv4) or /48 (IPv6) or larger
- ROAs authorising the scrubbing ASN where needed
- Tested diversion runbook
- Tunnel or interconnect for return traffic
Always-on option
For constant protection, traffic flows through scrubbing permanently.
How Infivate Networks can help
Infivate Networks delivers Cloud Network Services for organisations across India — from assessment and design to implementation and ongoing support. Talk to our team or email [email protected].
Frequently asked questions
Without a ROA covering the provider's announcement, RPKI-validating networks may reject it.
Automated detection can divert within minutes.
Need help with this?
Talk to the Infivate Networks team.
