AFM DDos and DNS DoS Protections

Participant Hands-on Lab Guide

©2021 F5 Networks, Inc. All rights reserved. F5, F5 Networks, and the F5 logo are trademarks of F5 Networks, Inc. in the U.S. and in certain other countries. Other F5 trademarks are identified at f5.com.

Any other products, services, or company names referenced herein may be trademarks of their respective owners with no endorsement or affiliation, express or implied, claimed by F5.

Table of Contents

Contents:

• Detecting and Protecting Against DDoS and DNS Protocol Attacks
• AFM DNS DoS and DDoS Protections Lab
• Base BIG-IP Configuration
• Detecting and Preventing DNS DoS Attacks on a Virtual Server
• Configuring a DoS Logging Profile
• About profiles for DoS and protocol service attacks
• Configuring a DoS Profile
• Attaching a DoS Profile
• Simulate a DNS DDoS Attack
• DNS DDoS Mitigations for Continued Service
• Remote Triggered Black Holing
• Silverline DDoS Protection
• Filtering specific DNS operations
• Detecting and Preventing System DoS and DDoS Attacks
• Simulating a ICMPv4 Flood Attack
• Simulating a TCP SYN DDoS Attack
• Preventing Global DoS Sweep and Flood Attacks