We are under attack! (of a DDoS)
Summary
The article describes building an inline DDoS mitigation engine (Sentry-Flow) using flow data, Akvorado, and FlowSpec, with remediation options (blackholing, ACLs, BGP FlowSpec) and integration with FastNetMon. It covers data collection, detection patterns, baselining, and operational aspects including automation, testing, and roadmap.