For now, service ids support only the mode mirror
set service ids ddos-protection mode mirror
It requires a lot of resources to monitor packets for this mode.
Add mode sflow that requires less resources.
set service ids ddos-protection mode sflow
For now, service ids support only the mode mirror
set service ids ddos-protection mode mirror
It requires a lot of resources to monitor packets for this mode.
Add mode sflow that requires less resources.
set service ids ddos-protection mode sflow
PR https://github.com/vyos/vyos-1x/pull/2105
set system sflow interface 'eth0' set system sflow interface 'eth1' set system sflow server 127.0.0.1 set service ids ddos-protection direction 'in' set service ids ddos-protection mode 'sflow' set service ids ddos-protection network '192.0.2.0/24' set service ids ddos-protection sflow listen-address '127.0.0.1' set service ids ddos-protection sflow port '6343' set service ids ddos-protection threshold general pps '10000'