Dashboard
⚙
Welcome to RouteLock! Let's get started.
Complete the Setup Wizard to configure routers, providers, NetFlow, and BGP peering. It only takes a few minutes.
Traffic (Last Hour)
Provider Traffic
| Provider | Status | Inbound | In Util | Outbound | Out Util | Link | 95th | Commit |
|---|
Commit Utilization
Top Inbound ASNs
Top Outbound ASNs
Pending Changes
Operating Mode:
Pending BGP Route Improvements
0
No pending improvements. In test/human mode, proposed route changes will appear here for review.
| Prefix | Old Provider | New Provider | Old RTT | New RTT | Old Loss | New Loss | Traffic | Weight | Type | Actions |
|---|
Pending DDoS Mitigations
0
No pending DDoS mitigations. In test/human mode, proposed mitigations will appear here for review.
| Target | Direction | Attack Type | Severity | Mitigation | Details | Created | Actions |
|---|
Router Management
Total Routers
--
Active
--
Edge
--
Core
--
Routers
| Name | Hostname | NetFlow IP | Role | Status | Interfaces | Last Discovery | Actions |
|---|---|---|---|---|---|---|---|
Add Router
Interface Classification
Discovering...
Total Interfaces
--
Upstream (Provider)
--
Downstream (Customer)
--
Unmapped
--
Ignored
--
Interfaces
| IfIndex | Interface Name | Description | Speed | Status | Traffic | Role | Provider | Actions |
|---|---|---|---|---|---|---|---|---|
| Select a router to view interfaces | ||||||||
☇
Select a router to view and classify its interfaces
Use the dropdown above to choose a router, then discover interfaces via SNMP
Providers
Providers
| Name | Status | Type | ASN | Links | Link Size | Bandwidth | Trend | Util % | Cost / Commit | Actions |
|---|
Active Improvements
Improvements
| ID | Prefix | Old Provider | New Provider | Type | Old RTT | New RTT | Weight | Status | Actions |
|---|
Traffic Analysis
Top Prefixes
| Prefix | Destination AS | Provider | Mbps | Packets |
|---|
Traffic Analytics
to
Live
Compare with:
to
Traffic Over Time(DDoS events shown as red bands)
Top Inbound ASNs
| ASN | AS Name | Bandwidth | Packets | Flows | Prefixes |
|---|
Top Outbound ASNs
| ASN | AS Name | Bandwidth | Packets | Flows | Prefixes |
|---|
ASN Detail
Top Prefixes by Bandwidth
| Prefix | ASN | AS Name | Provider | Bandwidth | Packets | Flows |
|---|
Protocol Breakdown
| Protocol | Bandwidth | Packets | % |
|---|
Top Destination Ports
| Port | Protocol | Bandwidth | Packets | Flows |
|---|
Application Categories
BGP Sessions
| Protocol | State | Since | Info |
|---|
Inbound Traffic Optimization
Traffic Distribution by Provider
| Target | Provider | Inbound Mbps | Share | AS Path Len | Prepend |
|---|
Active Prepends
| Target | Provider | Prepend Count | Status | Reason | Created | Actions |
|---|
Add Inbound Prepend
DDoS Protection
Attacks Detected
0
| Target | Direction | Severity | Attack Type | bps | pps | Deviation | Detected | Duration | Actions |
|---|
Active Mitigations
0
| Target | Direction | Severity | Attack Type | Mitigation | bps | pps | Deviation | Started | Duration | Actions |
|---|
Flow Analysis - DDoS Pattern Detection
Click "Analyze" to scan flow data for DDoS patterns, large flows (>10G/20G), and anomalies.
Detected Anomalies
| Severity | Type | Direction | Target | Bandwidth | PPS | Flows | Description |
|---|
Large Flows (>10 Gbps)
| Time | Target | Src AS | Dst AS | Proto | Port | Bandwidth | Direction | Provider |
|---|
Scanner / Bot Detection
Click "Detect Scanners" to find IPs scanning your network (port scans, network sweeps, coordinated probes).
Real-time scanner alerts (from live netflow)
| Source IP | Type | Severity | Target Port | Dst IPs | Packets | Description |
|---|
| Source IP | AS | Scan Type | Severity | Unique Dst IPs | Ports | Top Port | Packets | PPS | Description |
|---|
Inline Scrubber (XDP/eBPF)
Active Filter Rules
| ID | Type | Action | Source | Destination | Proto | Port | Packets | Bytes | Expires | Actions |
|---|
Add Scrubber Rule
Threat Intelligence
Intelligence Sources
Threat Intel Entries
| Source | Indicator | Type | Category | Confidence | Description | Last Seen | Actions |
|---|
Suppressions (Ignored Patterns)
| Type | Value | Reason | Permanent | Created | Actions |
|---|
Attack Management
Direction:
Attack Events
| ID | Target | Direction | Attack Type | Severity | Status | bps | pps | Intel Sources | Mitigation | Duration | Actions |
|---|
DDoS Events
✅
No Active Attacks
All clear. No ongoing DDoS attacks detected.
Ongoing Attacks
⚠ Some events may be stale — verify before taking action
| Target | Attack Type | Severity | Direction | Bandwidth | Packets/s | Duration | Mitigation Status | Mitigation | Actions |
|---|
| Target | Attack Type | Severity | Direction | Bandwidth | Packets/s | Started | Ended | Mitigation |
|---|
0 low severity events in the last 24 hours
| Target | Attack Type | Direction | Bandwidth | Packets/s | Status | Time | Duration |
|---|
Top Source IPs
Attack Details
Protocol Breakdown
TCP Flags Analysis
Port Analysis
Unique Sources Over Time
Sample Timeline
Alerts
Alerts
| Time | Severity | Category | Title | Message | Actions |
|---|
Reports
Active Providers
--
Active Improvements
--
Traffic
--
Unack Alerts
--
DDoS Events (24h)
--
Avg Latency Reduction
--
Traffic by Provider
Optimization Performance
| Provider | Improvements | Avg Latency Before | Avg Latency After | Reduction | Avg Loss Before | Avg Loss After | Traffic (Mbps) |
|---|
Cost Analysis
| Provider | Traffic (TB) | 95th (Mbps) | Commit (Mbps) | Utilization | Cost/Mbps | Est. Cost |
|---|
Security Summary
Maintenance Windows
Scheduled Maintenance
| Provider | Title | Scope | Start | End | Auto Withdraw | Suspend Probing | Status | Actions |
|---|
Routing Domains
Configured Domains
| ID | Name | BIRD Socket | Local AS | Router ID | Status |
|---|
High Availability
Node State
--
Peer State
--
Epoch
--
Peer Last Seen
--
HA Details
Probe IP Configuration
Assign dedicated source IPs to providers for PBR-based path probing
Total IPv4 IPs
--
Assigned IPv4
--
Total IPv6 IPs
--
Assigned IPv6
--
IPv4 Probe IPs
| IP Address | Label | Status | Assigned Provider | Actions |
|---|---|---|---|---|
IPv6 Probe IPs
| IP Address | Label | Status | Assigned Provider | Actions |
|---|---|---|---|---|
User Management
Users
| Username | Role | 2FA | Last Login | Actions | |
|---|---|---|---|---|---|
Create User
API Key Management
API Keys
| Name | Key Prefix | Created | Last Used | Expires | Actions |
|---|---|---|---|---|---|
Create API Key
API Key Created
Copy this key now. It will not be shown again.
Configuration
Our Network Prefixes
Define your announced network prefixes (IPv4 and IPv6) so RouteLock can classify traffic as inbound (destined to your network) or outbound (sourced from your network) for DDoS detection and attack management.
Runtime Settings
Controls how RouteLock optimizes your traffic in real-time
▸ What does this do?
Performance picks the fastest route (lowest latency/loss). Cost picks the cheapest provider that still meets quality thresholds. Learn more
▸ What does this do?
Review Only monitors traffic and suggests changes without modifying BGP. Active injects optimized routes into your routing table via BIRD. Start with Review Only until you're confident. Learn more
▸ What does this do?
Minimum packet loss improvement (%) required before switching a prefix to a different provider. Higher = fewer switches, lower = more aggressive optimization. Default 3% is recommended for most networks.
▸ What does this do?
Minimum latency improvement (ms) required before switching a prefix. A new provider must be at least this many milliseconds faster to trigger an optimization. Default 10ms works well for most use cases.
▸ What does this do?
Analyzes NetFlow data for volumetric DDoS attack patterns — high bandwidth spikes, port floods, protocol anomalies. When detected, triggers mitigation based on the DDoS Mode setting below. Learn more
▸ What does this do?
Manual: alerts only, you decide. Moderated: proposes FlowSpec/RTBH rules for your approval. Automated: deploys mitigations instantly, notifies you after. Start with Manual or Moderated. Learn more
NetFlow Status
NetFlow Configuration Generator
Generate router flow export configuration. Select your flow type, fill in the details, and choose your platform.
▸ Which flow type should I use?
NetFlow v9: Recommended for most Cisco routers (IOS 12.4+, IOS-XE). FNF: Cisco IOS-XE/IOS-XR with customizable fields. IPFIX: Industry standard, supported by Juniper, Nokia, Huawei. NetFlow v5: Legacy, IPv4 only, no MPLS/BGP fields. sFlow: Packet sampling, common on switches (Arista, Broadcom). Learn more
▸ Port info
UDP port RouteLock listens on for flow data. Default 1025. Common ports: 2055 (NetFlow), 6343 (sFlow), 4739 (IPFIX). Must match your router's export config.
▸ What sampling rate?
Sample 1 out of every N packets. 512 is recommended for 1G-10G links. Use 1024-2048 for 100G+ links. Lower = more accurate but higher CPU on router. Must match what you configure on the router.
BGP Peering Configuration Generator
Generate BGP peering config between your routers and the RouteLock route server. Fill in the details and select your platform.
Server Network Interfaces
Interface Discovery 0 unmapped
As NetFlow data arrives, router interfaces are automatically discovered here. Classify each interface as a provider link, internal, management, or ignore.
| Router | ifIndex | Type | Label | Next-Hops / Flow Info | Mapped To | Traffic (Total) | Last Seen | Actions |
|---|---|---|---|---|---|---|---|---|
| No interfaces discovered yet. Start sending NetFlow data to begin discovery. | ||||||||