NANOG 63 just wrapped up in San Antonio last week and I was honored to speak at the conference about ways to mitigate DDoS attacks.
The BGP Flow Specification defined in RFC 5575 gives network operators an additional tool to mitigate the effects of DDoS attacks on their network. Over time, there have been many tools available to operators for blocking DDoS attacks. BGP Flowspec is a great improvement over previous methods. In many ways it works very effectively, however, there are still some advancements needed to make this tool even more effective.
Watch the video below to learn more details about the pros and cons of BGP Flowspec.