Summary: Terminus is cheap and effective. Only needed at the edges. Can do filtering at more than 1Gb/s with minimum sized packets in cheap off-the-shelf 1u rack-mount servers. Should really just be a standard edge-router feature Most have the forwarding plane capability. Just need the control protocol additions. Our test implementation can filter a million node botnet in a few tens of seconds. Bottleneck is likely to be how fast you can identify bots. |