An open-source, scalable DDoS protection system designed for network operators to withstand high-bandwidth attacks.
Gatekeeper is an open-source DDoS protection system built to scale to any bandwidth and defend against modern, high-volume attacks. It uses a distributed architecture with a centralized policy to coordinate defenses across multiple nodes, enabling operators to mitigate multi-vector DDoS attacks effectively. The system is designed for high-performance packet processing, leveraging DPDK to handle traffic directly, bypassing the kernel for efficiency.
Network operators at institutions, service providers, content providers, and enterprise networks who need scalable, self-hosted DDoS protection. It is not intended for individual Internet users.
Developers choose Gatekeeper because it is the first open-source solution offering enterprise-grade DDoS protection with unlimited scalability. Its centralized policy management simplifies defense coordination across distributed nodes, and its use of DPDK ensures high-performance traffic handling, making it a viable alternative to proprietary DDoS mitigation services.
The first open-source DDoS protection system
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Engineered to handle any peak bandwidth, ensuring defense against evolving, high-volume attacks as stated in the README.
Uses a single network policy across distributed nodes, simplifying coordination without high-latency mechanisms per the project philosophy.
Leverages DPDK for kernel-bypass I/O, enabling efficient handling of high traffic loads as highlighted in the key features.
Capable of fighting multiple DDoS attack types simultaneously through distributed algorithms, as described in the README.
Requires enabling VT-d in BIOS, configuring hugepages, and binding NICs to DPDK, involving kernel modifications and specific hardware support, making deployment non-trivial.
Targeted at network operators, assuming familiarity with DPDK, networking protocols, and Linux administration, which can be a barrier for general developers.
Full details are in a separate wiki, and as a niche open-source project, it lacks extensive tutorials or integrations compared to commercial solutions.