DDoS with LTM
The BIG-IP LTM is a proxy server by nature of establishing unique TCP connections between itself and the client and the server. By employing a full TCP proxy architecture in this manner, the BIG-IP can protect the server from a number of TCP based attacks, including Distributed Denial of Service (DDoS) attacks. The BIG-IP uses the industry standard SYN Cookie approach using specialized imbedded chips in its hardware platforms.
We also have experience with integrating your BIG-IPs with the Silverline DDoS cloud. With TMOS version 13, we can configure your BIG-IPs to automatically detect DDoS attacks and automatically trigger your traffic to route-away to the F5 SilverlineDDoS cloud for DDoS cleansing. We configure your BIG-IP to use Border Gateway Protocol (BGP) to integrate directly with the Silverline cloud. The Silverline cloud can handle over 13 Tbps shared DDoS cleansing protection so you can be sure their cloud can handle your DDoS traffic requirements.