WanGuard Service
BGP FlowSpec & WanFilter Traffic Filtering
Filtering is the most complex part of anti-DDoS to set up — and the most valuable for content and service providers who cannot afford to black-hole. ITORO configures BGP FlowSpec and WanFilter so attack traffic is dropped by protocol, port and packet pattern while your customers stay online.
What ITORO delivers
- BGP FlowSpec rules pushed to your edge router to drop attacks by match criteria (protocol, ports, packet size, flags).
- WanFilter / DPDK software scrubbing where you want on-box filtering at line rate.
- Rule templates for the common vectors (UDP amplification, SYN/ACK floods, DNS/NTP reflection).
- Guidance on what FlowSpec can and cannot match, so expectations are honest.
How it works
FlowSpec turns your existing BGP-capable router into a surgical filter — a firewall rule distributed as a BGP update, enforced in hardware at line rate. Random-source or random-port floods that cannot be expressed as a match are handled by WanFilter or escalated to RTBH. We help prepare the network so filtering is reliable, not fragile.
Ready to deploy or tune your protection?
ITORO delivers WanGuard as one solution — installed, tuned and supported by an Andrisoft Gold Partner.
Contact ITORO