Production-Ready RTBH Service

Remotely Triggered
Blackhole Service

Protect your network from malicious traffic by blackholing prefixes at the edge using BGP.
Industry-standard RTBH implementation with enterprise features.

ASN: AS49094 • No credit card required

What is RTBH?

Remotely Triggered Blackhole (RTBH) is a network security technique

How It Works

RTBH uses BGP (Border Gateway Protocol) to announce specific IP prefixes with a special community tag that signals routers to drop all traffic destined for those IPs.

When a malicious IP or prefix is identified, you can instantly blackhole it by announcing it via BGP, causing all traffic to that destination to be dropped at your network edge.

Why Use RTBH?

  • Instant response to DDoS attacks and malicious traffic
  • Protect your network infrastructure from overload
  • Industry-standard RFC 3882 and RFC 7999 compliant
  • Works with any BGP-capable router

Enterprise Features

Everything you need to manage RTBH at scale

BGP Session Management

Configure and manage multiple BGP peering sessions with support for IPv4, IPv6, and dual-stack

Multiple Source Types

Ingest prefixes from URL feeds, webhooks, manual entry, or system sources. Automatic normalization and deduplication

Export Compilation

Deterministic prefix export with BGP community tagging (standard and large communities), overlap policies, and whitelist filtering

Prefix Intersection Alerts

Automatic detection when your announced prefixes intersect with blocklist sources. Get notified before problems occur

Analytics & Monitoring

Track usage, session health, source contributions, and trends. Make data-driven decisions about your RTBH strategy

Enterprise Security

PeeringDB OAuth integration, API key management, role-based access control, audit logging, and comprehensive security headers

How Spectops RTBH Works

Simple, automated, and reliable

1

Connect Your Sources

Add blocklist sources via URL feeds, webhooks, or manual entry. Our system automatically fetches, normalizes, and deduplicates prefixes from multiple sources.

2

Configure BGP Sessions

Set up BGP peering sessions with your routers. Configure IPv4/IPv6 support, communities, whitelists, and overlap policies. Preview exports before applying.

3

Automatic Export

Our export compiler automatically generates BGP announcements with proper community tags. Prefixes are filtered through whitelists and overlap policies, then announced to your routers.

4

Monitor & Alert

Get real-time alerts when your announced prefixes intersect with blocklists. Monitor session health, track usage analytics, and receive notifications via email, webhook, or in-app.

Why Choose Spectops RTBH?

Standards Compliant

Fully compliant with RFC 3882 (RTBH) and RFC 7999 (Large Communities). Works seamlessly with any BGP-capable router from major vendors.

Production Ready

Built for reliability with automated deployment, health monitoring, database backups, and comprehensive error handling. Trusted by network operators.

Scalable Architecture

Handle millions of prefixes across multiple BGP sessions. Background workers process jobs asynchronously, ensuring fast response times even under load.

Developer Friendly

RESTful API with OpenAPI documentation, webhook support, API key authentication, and comprehensive logging. Integrate with your existing tools and workflows.

Ready to Protect Your Network?

Get started with Spectops RTBH in minutes. No credit card required.

Questions? Contact us at [email protected]