Network Security

Protect your network against DDoS attacks (QFX5130-32CD)—Distributed denial-of-service (DDoS) attacks typically use a large number of network control packets to trigger exceptions in the network, consuming resources and crippling network operations. Starting in Junos OS Evolved Release 21.2R1, QFX5130-32CD switches have DDoS protection enabled by default. DDoS protection uses firewall filters and policers to discard or rate-limit control plane traffic. Thus, malicious traffic cannot cause device failure. You can disable DDoS protection or change default policer parameters for a protocol group or supported packet types in a protocol group.

[See Distributed Denial-of-Service (DDoS) Protection Overview.]