Netdev 2.1 - Droplet: DDoS countermeasures powered by BPF + XDP
Channel: netdevconf
Date: 2017-05-01

This talk was given by Martin Lau on Apr 6th/2017 at Netdev 2.1 in Montreal on behalf of Huapeng Zhou, Doug Porter, Ryan Tierney, and Nikita Shirokov

Droplet is a generic framework to implement bpf policers to drop packets at the earliest stage in the networking stack, preferably at line rate. It's born for anti-DDoS and is the preferred infrastructure at Facebook to plug in DDoS countermeasures. This talk presents the overall architecture of Droplet and discusses a few issues in developing and rolling out the software.

Content at: https://www.netdevconf.org/2.1/session.html?zhou