LiveShield

0 reviews

LiveShield is an on-premise DDoS protection platform for ISPs and network operators. It is deployed directly within your infrastructure - in your network, data center or ISP node - and analyzes traffic locally and in real time, without redirecting it to external centers. There is no additional latency and the natural packet path in your network stays unchanged. At the core of the system is the Worker module, written in C on top of DPDK. It talks directly to the network interface card, bypassing the kernel and using poll-mode drivers, which allows packet processing at line rate on standard bare metal servers. LiveShield works off-path: it receives a copy of incoming traffic through a SPAN port or an optical link TAP, so it does not sit in the production data path and does not affect it. Attack detection is based on the analysis of this mirrored traffic, not on NetFlow, and the system can react within a single second after detecting an anomaly. Mitigation is carried out with BGP FlowSpec rules injected into your own border routers, so unwanted traffic is dropped at the edge while legitimate traffic keeps flowing. When FlowSpec is not enough, LiveShield can fall back to selective blackholing (RTBH), including signaling upstream providers via BGP community. The platform is modular (Manager, Analyser, Worker, Helper) and scales horizontally: as traffic grows, you add Workers instead of replacing hardware. It supports multiple locations under a single management panel, runs on commodity hardware and avoids vendor lock-in.