{"pageProps":{"meta":{"title":"From Bugs to Blackholes: The Wild World of Flowspec in Network Security","description":"RETN uses Flowspec for advanced network security and DDoS mitigation. Learn about its history, features, and how it protects against cyber threats like UDP floods.","keywords":"news, press release, success stories, case studies, case, success, press, update, events, itw, ripe, nanog, apricot, capacity, awards, ptc, attend, events, itw, ripe, nanog, apricot, capacity, awards, ptc, attend"},"sandwichProps":{"items":[{"main":{"url":"/about","title":"about","slug":""},"sub":[{"title":"Company","url":"about"},{"title":"Careers","url":"about/careers"}]},{"main":{"url":"/solutions","title":"solutions","slug":"solutions"},"sub":[{"slug":"networks","title":"Managed Global Private Network","url":"solutions/networks"},{"slug":"bgp-solutions","title":"BGP Solutions","url":"solutions/bgp-solutions"},{"slug":"one-port","title":"One Port","url":"solutions/one-port"},{"slug":"transkz","title":"TRANSKZ","url":"solutions/transkz"},{"slug":"cyber-security","title":"Cyber Security","url":"solutions/cyber-security"}]},{"main":{"url":"/products","title":"products","slug":"products"},"sub":[{"slug":"capacity","title":"Capacity","url":"products/capacity"},{"slug":"internet","title":"Internet","url":"products/internet"},{"slug":"ethernet-vpn","title":"Ethernet & VPN","url":"products/ethernet-vpn"},{"slug":"remote-ix","title":"Remote IX","url":"products/remote-ix"},{"slug":"colocation","title":"Colocation","url":"products/colocation"},{"slug":"cloud-connect","title":"Cloud Connect","url":"products/cloud-connect"},{"slug":"ddos-protection","title":"DDoS Protection","url":"products/ddos-protection"},{"slug":"Flex-IX","title":"Flex IX","url":"products/Flex-IX"}]},{"main":{"url":"/","title":"network","slug":""},"sub":[{"title":"Network map","url":"network/network-map"},{"title":"Points of Presence","url":"network/points-of-presence"},{"title":"BGP communities","url":"bgp-communities"},{"title":"Peering policy","url":"network/peering-policy"},{"title":"Routing Policy","url":"network/routing-policy"},{"title":"RTT Map","url":"https://rtt.retn.net"},{"title":"Looking glass","url":"network/looking-glass"}]},{"main":{"url":"/","title":"support","slug":""},"sub":[{"title":"NOC","url":"support/noc"},{"title":"FAQ","url":"support/faq"}]},{"main":{"url":"/news-events","title":"news","slug":"news-events"},"sub":null},{"main":{"url":"/contacts","title":"contacts","slug":"contacts"},"sub":[{"slug":"london","title":"London","url":"contacts/retn-in-uk"},{"slug":"frankfurt","title":"Frankfurt","url":"contacts/retn-in-germany"},{"slug":"riga","title":"Riga","url":"contacts/retn-in-latvia"},{"slug":"warsaw","title":"Warsaw","url":"contacts/retn-in-poland"},{"slug":"hong-kong","title":"Hong Kong","url":"contacts/retn-in-hong-kong"},{"slug":"kyiv","title":"Kyiv","url":"contacts/retn-in-ukraine"},{"slug":"amsterdam","title":"Amsterdam","url":"contacts/retn-in-netherlands"},{"slug":"almaty","title":"Almaty","url":"contacts/retn-in-kazakhstan"},{"slug":"milan","title":"Milan","url":"contacts/retn-in-italy"},{"slug":"singapore","title":"Singapore","url":"contacts/retn-in-singapore"},{"slug":"Helsinki","title":"Helsinki","url":"contacts/retn-in-finland"},{"slug":"tallinn","title":"Tallinn","url":"contacts/retn-in-estonia"},{"slug":"stockholm","title":"Stockholm","url":"contacts/retn-in-sweden"},{"slug":"yerevan","title":"Yerevan","url":"contacts/retn-in-armenia"},{"slug":"vilnius","title":"Vilnius","url":"contacts/retn-in-lithuania"},{"slug":"sofia","title":"Sofia","url":"contacts/retn-in-bulgaria"}]},{"main":{"url":"/cases-testimonials","title":"cases","slug":"cases-testimonials"},"sub":""},{"main":{"url":"/","title":"trending","slug":""},"sub":[{"slug":"system-integrators","title":"RETN - The global partner for System Integrators","url":"trending/system-integrators"},{"slug":"Building_the_networks_of_tomorrow","title":"Building the networks of tomorrow","url":"trending/Building_the_networks_of_tomorrow"},{"slug":"the-lag-map-countries-most-frustrated-with-internet-connectivity","title":"The lag map: The most frustrated internet users","url":"trending/the-lag-map-countries-most-frustrated-with-internet-connectivity"},{"slug":"FlexIX","title":"Flex IX","url":"trending/FlexIX"},{"slug":"The-2026-Annual-Resilience-Check","title":"The 2026 Annual Resilience Check","url":"trending/The-2026-Annual-Resilience-Check"},{"slug":"retn-amplia-conectividad-en-barcelona","title":"RETN amplía conectividad en Barcelona","url":"trending/retn-amplia-conectividad-en-barcelona"},{"slug":"building-future-networks","title":"Building Future Networks","url":"trending/building-future-networks"},{"slug":"the-backbone-for-broadcasting-media-entertainment","title":"The Backbone for Broadcasting Media Entertainment","url":"trending/the-backbone-for-broadcasting-media-entertainment"}]}],"topics":[{"title":"DDoS Protection","url":"/products/ddos-protection"},{"title":"Internet Access","url":"/products/internet"},{"title":"Points of Presence","url":"/network/points-of-presence"},{"title":"24/7 Support","url":"/support/noc"},{"title":"RETN Offices","url":"/contacts"}],"main":[{"main":{"text":"About RETN"}},{"main":{"text":"Solutions"}},{"main":{"text":"Products"}},{"main":{"text":"Network"}},{"main":{"text":"Support"}},{"main":{"text":"News & Events"}},{"main":{"text":"Contact"}},{"main":{"text":"Case Studies & Testimonials"}},{"main":{"text":"trending"}}]},"lead":{"data":[{"picture":null,"id":1,"title":"Панъевразийская сеть","desc":"

The leading independent Network Service Provider for IP Transit and high-bandwidth services - uniquely connecting East and West on a single network

","sort":1}]},"content":{"slug":"Flowspec_in_Network_Security","date":1754956800,"event_date":1754956800,"title":"From Bugs to Blackholes: The Wild World of Flowspec in Network Security","type":"new","tags":[{"id":3,"name":"Network"},{"id":4,"name":"Company news"}],"description":"

Discover how RETN uses Flowspec, and continues to surprise and defend against today’s relentless DDoS threats. A 20-year-old protocol proves it still has what it takes to protect networks in a fast-changing security landscape.

","picture":{"id":2998,"name":"Flowspec_News_800x455 (4)","original_name":"Flowspec_News_800x455 (4).png","mime":"image/png","extension":"png","size":52769,"sort":0,"path":"news/","description":null,"alt":null,"hash":null,"disk":"public","user_id":2,"group":null,"document_name":null,"is_published":1,"file_lang":null,"is_storage":0,"created_at":"2025-08-12T16:06:54.000000Z","updated_at":"2025-08-12T16:06:54.000000Z","url":"https://retn.net/storage/news/Flowspec_News_800x455 (4).png","relativeUrl":null},"more_title":"From Bugs to Blackholes: The Wild World of Flowspec in Network Security","more_description":"

In today’s interconnected world, internet security isn't just important - it’s essential. With the relentless rise of Distributed Denial of Service (DDoS) attacks, keeping networks safe is a never-ending challenge, hence you may have seen the launch of our new DDoS mitigation platform earlier last year. However, RETN has a powerful, old friend - Flowspec, a protocol with a colourful 20-year history that’s still defending (and surprising) people with its capabilities. This advanced BGP protocol offers unparalleled control over network traffic.

Flowspec: The Protocol That Took Its Time

Despite being around for nearly two decades, Flowspec is far from the industry default for network security. In fact, many Internet Service Providers (ISPs) still haven’t invited Flowspec to the cybersecurity party. Some vendors have only recently added support for Flowspec, leaving ISPs playing catch-up on upgrades. Lucky for RETN, we’ve been a step ahead - thanks to Juniper Networks, our routers were ready for Flowspec from day one. We’ve been able to protect our network (and our clients’ nerves) from UDP flood attacks without waiting around for the competition to catch on.

Early Bugs and Blackholes: Flowspec’s Growing Pains

When Flowspec first appeared, there were more than a few bugs. One particularly memorable story from an ISP (not RETN, thankfully!) involved a misconfigured rule that accidentally blocked all TCP packets port 443 - essentially blackholing secure web traffic across their network. While it wasn’t a full-scale BGP leak disaster, it was an epic reminder that with great power comes great responsibility. Today, with careful configuration and thoughtful rule design, Flowspec has become the bouncer at our firewall’s door, keeping the malicious traffic at bay and bolstering our cyber defence.

Smarter Filtering at the Edge of the Network

Unlike traditional BGP (Border Gateway Protocol), which just handles routes, Flowspec goes deeper. It uses TCP and UDP headers along with other packet details to create precise traffic filtering rules. This makes it a champion at managing DDoS protection for attacks like UDP floods - a common DDoS attack type where servers are bombarded with fragmented traffic, forcing them to reassemble packets. With Flowspec, RETN intercepts and discards suspicious traffic before it even reaches our firewalls, acting as a kind of preemptive bouncer and saving our firewalls from a flood of needless processing. This is a core part of our proactive network security strategy.

Beyond Standard: RETN’s Custom Flowspec Validator

The standard Flowspec validation rules had their limits, so RETN took matters into its own hands. We developed a custom validator that enforces Flowspec’s checks, making sure that each rule is rigorously vetted before being applied. Think of it as our home-grown \"hacker\" tweak, optimising Flowspec to fit the unique needs of our network. This custom approach ensures that even if the RFC standards don’t catch a mismatch, our validator does.

The Battle Strategy: Clever Rule Ordering and Traffic Management

Deploying Flowspec isn’t just about turning it on, rules should be carefully planned; moreover, like in traditional firewall rules, order also matters, meaning that Flowspec filters act in a strategic sequence. Therefore, you can send instructions to RETN’s border routers to match packets with SYN flag first, then drop packets with particular lengths, and so on. It’s like a network defence “choose-your-own-adventure” game, but for packets - flows have to fight their way through a series of cleverly ordered filters, ensuring that threats are neutralised efficiently. This approach is key to our resilient network connectivity.

Scalable Defence, Distributed Filtering

One of the biggest advantages of Flowspec is its scalability. Every router in the network can participate in cleaning, which eliminates the capacity limitation related to firewall devices or scrubbing servers. You can configure/import rules on a single router, but then it will be distributed across the whole network and optionally beyond. So, the whole network turns out to be an actor in traffic mitigation, not only dedicated devices. If necessary, the updated rule can be distributed the same way, which is much easier than the orchestration of a bunch of firewalls.

Open-Source Power

There are a lot of various tools related to traffic data collection, analysis and threats detection. Some of them are proprietary and expensive, but there are also some open-source solutions.

Since Flowspec is an RFC-standardised feature that works on standard BGP protocol, it allows very smooth and easy integration to various systems. And these monitoring tools get capability not only to look but also to perform some actions based on their observations.

The Evolution of Flowspec and Support for IPv6

Initially, Flowspec was limited to IPv4, but today it’s fully compatible with IPv6 - future-proofing our security strategy as the internet expands. Combined with network automation and advanced routing protocols, RETN’s Flowspec implementation is ready to handle both today’s and tomorrow’s challenges. For us, IPv6 support is essential, especially as more customers require this level of readiness in a secure, scalable internet experience.

Monitoring the Battle: Keeping Tabs on Flowspec’s Impact

To keep our network safe, we rely on robust network monitoring tools like SNMP and Zabbix to track Flowspec’s real-time impact on traffic. When a threat emerges, Flowspec intercepts it at the edge, feeding data back to our monitoring systems. This comprehensive oversight ensures that every filtered packet and discarded UDP flood is accounted for, allowing us to constantly refine and improve our approach to internet security.

The Bottom Line: Flowspec is RETN’s Edge in Cybersecurity

As cyber threats continue to evolve, Flowspec remains one of RETN’s most essential tools for BGP-based traffic management and automated DDoS protection. It’s a protocol that’s taken its time to catch on, but it’s proving its worth as a critical asset for network security. From keeping our routers safe to filtering floods before they reach our firewalls, Flowspec is not just a tool - it’s a strategic part of our approach to resilient connectivity.

In the ever-changing world of internet security, RETN’s adoption of Flowspec stands out as a bold move to defend against attacks while optimising traffic flow for a seamless customer experience. And as the threats grow, so does our commitment to deploying innovative, powerful solutions to protect our network and yours.


Explore the full portfolio of RETN DDoS protection services.

","more_pictures":[],"link":"","meta_description":"RETN uses Flowspec for advanced network security and DDoS mitigation. Learn about its history, features, and how it protects against cyber threats like UDP floods."},"navButtons":{"prev":"RETN_Upgrades_Lithuanian_Network_Ring","next":"Partnership_Connectivity_RETN_JPIX","type":"new"},"_nextI18Next":{"initialI18nStore":{"en":{"common":{"customer-portal":"Customer Portal","more-info-btn":"Read more","products-gallery":"Products Gallery","section-bottom-title":"Haven’t found the answer?","section-bottom-other-links":"Other useful links","we-are-social":"We are social","want-socialise":"Do you want to socialise with us?","copyright":"RETN GROUP OF COMPANIES. RETN NETWORKS LTD","socials":{"linkedIn":"https://www.linkedin.com/company/retn-ltd-","facebook":"https://www.facebook.com/retn.net","vk":"https://vk.com/retnnet","twitter":"https://twitter.com/RETNnet"},"form-errors":{"pattern":"Invalid data format","required":"Mandatory Field","max-length":"Exceeded the maximum number of characters","max-length-255":"The allowed field length is 3-255 characters"},"404-text":"There is no such page, but you can return to the main page or select FAQ","404-input-placeholder":"What are you looking for?","error-email":"Invalid Email Address format","error-work-email":"This field is mandatory, please use your work email.","error-phone":"Invalid phone format","error-enquiry":"Mandatory field","error-question":"Mandatory field","send-error":"Send error","feetback-name":"Name and Surname","feetback-company":"Company","feetback-email":"Email","feetback-work-email":"Work email","feetback-type":"What is your preferred method of communication?","feetback-input":"Please leave your contact detail","feetback-enquiry":"Your Enquiry","feetback-source":"How did you hear about us?","feetback-social-media":"Social Media","feetback-search-results":"Search Results","feetback-media":"Media","feetback-advertising":"Advertising","feetback-events":"Events","feetback-referral":"Referral","feetback-other":"Other","min-length-error":"The allowed field length is 3-400 characters","max-length-error":"The allowed field length is 3-400 characters","min-length-error20":"The allowed field length is 3-20 characters","max-length-error20":"The allowed field length is 3-20 characters","min-length-error800":"The allowed field length is 3-800 characters","max-length-error800":"The allowed field length is 3-800 characters","feetback-submit":"Submit","feetback-sending":"Sending","feetback-sent":"Sent","feetback-phone":"Telephone","feetback-question":"SIDt","sent-thanks-footer":"Thank you, you have been added to our mailing list. Please check your email.","sent-thanks-main":"Thank you, your message was sent successfully.","sent-thanks-career":"Thank you, your application was sent successfully.","sent-thanks-feedback":"Thank you for your valuable feedback. We appreciate the time you took to share your experience of working with us. ","email-taken":"The email has already been taken. Please contact market@retn.net.","sent-text-main":"We will contact you as soon as possible. Meanwhile check out these useful links.","sent-text-career":"We will contact you the soonest possible.","captha-error":"Please accept the terms to proceed.","send-error-main":"

Failed to send your message. Please try later or contact RETN by another method.

","send-error-noc":"

Failed to send your message. Please try later or contact RETN NOC by another method: noc@retn.net

Call us","send-error-career":"

Failed to send your message. Please try later or contact RETN by another method: careers@retn.net

Call us","send-error-footer":"Failed to send your message. Please try again later.","send-error-feedback":"Failed to send your message. We appreciate your valuable feedback. Please try later or mail us at pr@retn.net.","upload-error-large":"The uploaded file is too large. Max file size 8 MB.","upload-error-type":"Uploaded file type is not supported","policy":"

By clicking on “Send” you agree that you have read our Privacy policy and Cookie Policy and that you agree to be bound by them

","footer-sub":" By subscribing to our news and events you accept our privacy policy. You can unsubscribe at any time by clicking the link in the footer of our emails.","cookie-policy":"Cookie Policy","privacy-policy":"Privacy Policy","legal-policy":"Legal Policy","contact-us":"Contact us","ask-our-experts":"Ask our experts","sign-up-form":"Send your CV","policy-text":"By clicking this button, you agree to RETN's ","join":"Join","company-text":"We are here to provide you the best connectivity service experience","talk-to-us":"TALK TO US","sign-up":"SIGN UP","contact-descr":"What can RETN do for you?","how-it":"How does it work?","retn-list":"RETN list of PoPs","retn-network":"RETN network","investigate-network":"Investigate our network","solution-overview":"solution overview","main-page":"Main page","faq":"FAQ","contact-page-title":"RETN regional offices","sandwich-about":"About RETN","sandwich-solutions":"Solutions","sandwich-products":"Products","sandwich-network":"Network","sandwich-support":"Support","sandwich-news":"News & Events","sandwich-contacts":"Contacts","sandwich-cases":"Case Studies & Testimonials","sandwich-help-text":"How can we help you?","sandwich-help-placeholder":"What are you looking for?","sandwich-help-description":"Speed up your search on our website.","sandwich-help-faq":"Frequently searched topics","sandwich-careers":"Careers","sandwich-ddos":"DDoS Protection","sandwich-pops":"POPS","open-form":"Open application form","want-join":"I want to join RETN Team","open-form-text":"Can’t see a position suitable for you, but think you have something to offer? We’d love to hear from you.","product-features":"Product Features","call-noc":"Call NOC","join-us":"Join us","how-reach-full":"How to reach us in","how-reach-half-1":"How to reach","how-reach-half-2":"us in","technical-issue":"For technical issues:","24-7":"NOC 24/7:","licenses-certificates":"Licenses & certificates","cookie-title":"Your Choices Regarding Cookies on this Site","cookie-text":"Welcome to retn.net. Cookies are essential for the proper functioning of this site. To enhance your experience, we use cookies to collect statistics and optimise site functionality. Click \"Agree” to accept cookies and continue directly to the site, or click \"Learn More\" to read our detailed Cookie Policy and Privacy Policy.","cookie-links":"Learn more about our Cookie Policy and Privacy Policy","cookie-accept":"AGREE AND PROCEED","cookie-decline":"DECLINE","search":"Search","contact-noc":"Contact NOC","PeeringDB":"Peering-DBPage","show-more":"Show more","delete":"Delete","news-subscribe":"Subscibe to RETN news & events.","tech-reports":"Tech Reports","search-results":"Search results","title":"Related products","attach-cv":"Attach my CV","construction-issues":"For construction issues:","navigate-to-retn-in-russia":"Navigate to RETN in Russia","download-now-submit":"Download Now","download-white-paper":"Download white paper","trending":"Trending","policy-with-image":"

By entering your details you agree to receive our latest industry news and invitations to our exclusive events. Please refer to our

"},"pages":{"backspace":"Backspace","home":"home","support":"support","products":"Products","contacts":"Contacts","faq":"Frequently Asked Questions","news-events":"News & Events","cookie-policy":"Cookie Policy","privacy-policy":"Privacy Policy","peering-policy":"Peering Policy","marketing-policy":"Marketing Page","legal-notice":"Website Disclaimer and Terms of Use","back-to-team":"Back to our team","noc":"Network Operations Center (NOC)","about":"About RETN","solutions":"Solutions","network":"Network","cases-testimonials":"Case Studies & Testimonials","points-of-presence":"Points of Presence","routing-policy":"Routing Policy","looking-glass":"Looking glass","network map":"Network Map","bgp-communities":"BGP Communities","careers":"Careers"},"news-detail":{"addToCalendar":"Add to calendar","newsOverview":"News overview","eventOverview":"Event overview","share":"Share","previous":"Previous","next":"Next","date":"Date","time":"Time","reminder":"Reminder","title":"News & Events","news":"News","events":"Events","attned":"Attend","header_title":"Check out our latest News & Events","header_title_icon":"N","view-all":"View all","tags":"Tags","show-more":"Show more","search":"Search","inquiries-title":"FOR MEDIA INQUIRIES","inquiries-text":"Please note that this contact information is for media inquiries only. If this is a non-media inquiry please reach out to market@retn.net","search-result":"Searching results","back-to-events":"Back to all events","back-to-news":"Back to all news","trending":"Trending"},"common_alt_text":{"sandwich_search_input":"search button","sandwich_search_submit_button":"submit search form","prev":"prev step","next":"next step","vacancy_open_accordion":"vacancy open accordion","network_map":"network map","looking_glass":"Looking glass","accordion-faq-item-button-aria-label":"accordion-faq-item-button-aria-label","open_accordion_item":"open accordion item","email_input":"Email input","toggle_search":"Toggle search","toggle_menu":"Toggle menu","pdf_file_available":"PDF file available (opens in new tab)","search_news_submit":"Start searching","link-to":"You will be redirected to link","news-take-filter":"Select filter","footer-logotype-icon":"Footer logotype","footer-x-icon":"Footer twitter","footer-fb-icon":"Footer facebook","footer-linked-icon":"Footer linkedin","footer_menu":"Footer menu"}}},"initialLocale":"en","userConfig":{"i18n":{"locales":["en","de","cn"],"defaultLocale":"en","localeDetection":false},"react":{"useSuspense":false},"default":{"i18n":{"locales":["en","de","cn"],"defaultLocale":"en","localeDetection":false},"react":{"useSuspense":false}}}}},"__N_SSG":true}