1.4. Lab 3 - AFM DDoS Lab

• 1.4.1. Lab Overview
• 1.4.2. Detecting and Preventing DNS DoS Attacks on a Virtual Server
  • 1.4.2.1. Base BIG-IP Configuration
  • 1.4.2.2. Establishing a DNS server baseline
  • 1.4.2.3. Configuring a DoS Logging Profile
  • 1.4.2.4. Configuring a DoS Profile
  • 1.4.2.5. Attaching a DoS Profile
  • 1.4.2.6. Simulate a DNS DDoS Attack
  • 1.4.2.7. DNS DDoS Mitigations for Continued Service
  • 1.4.2.8. Bad Actor Detection
  • 1.4.2.9. Remote Triggered Black Holing
  • 1.4.2.10. Silverline Mitigation
  • 1.4.2.11. Filtering specific DNS operations
• 1.4.3. Advanced Firewall Manager (AFM) Detecting and Preventing System DoS and DDoS Attacks
  • 1.4.3.1. Configure Logging
  • 1.4.3.2. Simulating a Christmas Tree Packet Attack
  • 1.4.3.3. Simulating a TCP SYN DDoS Attack
  • 1.4.3.4. Preventing Global DoS Sweep and Flood Attacks
  • 1.4.3.5. Single Endpoint Sweep
  • 1.4.3.6. Single Endpoint Flood

Written for TMOS 13.1.0.1/BIG-IQ 6.0