Flowtriq

Flowtriq monitors every network packet to a servers and identifies traffic spikes that match known DDoS patterns. It classifies attacks into eight types, providing protocol‑level confidence scores, and can capture full PCAP data for forensic analysis. The system also tracks baseline traffic and flags anomalies in real time.

When an attack is detected, Flowtriq automatically applies mitigation actions. It can update per‑server iptables, deploy null‑routes, and configure CDN rules, as well as trigger BGP FlowSpec, RTBH blackhole, and rate‑limiting policies. Cloud scrubbing can be invoked with providers such as Cloudflare, OVH, or Hetzner, and automated runbooks chain these steps into a coordinated response.

Alerts are sent through multiple channels—including Discord, Slack, PagerDuty, OpsGenie, SMS, email, and webhooks—so infrastructure teams receive immediate notifications. The platform offers analytics, threat‑intel baselines, multi‑node status pages, and audit logs to help operators understand attack profiles and maintain continuous protection.