Our Technology

Built on the Cutting Edge

CoreTech is one of the world's first adopters of eBPF/XDP technology for DDoS mitigation — delivering packet processing speeds and precision that legacy systems cannot match.

Multi-Tbps
Total Filtering Capacity
Extensive IXs
Internet Exchanges Connected
Multiple
TIER1 Transit Providers
Global Range
Global BGP Peers
<1 Second
Detection Response Time
99.99%
Network Uptime SLA
24/7/365
Support Availability
Traffic Flow

How CoreDetection Works

From raw edge traffic to purified packets in under 1 second.

01
Raw Traffic Arrives
Mixed legitimate and attack packets hit the network edge
02
sFlow / NetFlow Sampling
Traffic is sampled and exported to analysis clusters
03
CoreDetection™ AI Analysis
L3-L7 behavioral neural analysis identifies threats in real-time
04
Threat Verdict & Rules
Attack classified and firewall rules auto-generated
05
CoreEdge™ XDP Filter
Malicious packets dropped at NIC level via eBPF/XDP
06
Clean Traffic Delivered
Only verified legitimate packets reach your infrastructure
<1s
Detection to Mitigation
0
False Positives
100%
Mitigation Efficiency
L3-L7
Full-Stack Coverage
Appliance vs. Platform

Legacy Firewalls vs CoreTech

Why outdated ASIC and standard OS-based mitigations fail against modern polymorphic attacks.

CapabilityLegacy Appliances
CoreTech Platform Winner
Packet Processing SpeedLimited by OS Network StackeBPF/XDP (NIC Level)
Detection LogicStatic PPS/BPS ThresholdsLayer 7 Neural Rhythm AI
Rule Propagation Time2 - 5 MinutesSub-second Sync
Stateful Protection ScopeLocalized (Per Appliance)Global Consensus Across PoPs
False Positive RateHigh (Legit Traffic Dropped)Near Zero
L3-L4 Firewall

CoreEdge™ — Complete DDoS Mitigation

Absolute Protection Against Infrastructure Attacks

CoreEdge serves as your impenetrable outer shield. When a massive DDoS attack hits, it acts as the execution arm that neutralizes malicious traffic before it ever touches your actual servers, protecting your infrastructure against crippling exhaustive attacks.

  • Massive Flood Drops: Instantly absorbs terabits of garbage data common in UDP Amplification, DNS reflection, and NTP amplification attacks.
  • Protocol Scrubbing: Halts resource-exhaustion tactics like SYN floods, Smurf attacks, and Ping of Death aiming to crash your servers.
  • Zero-Latency Mitigation: Filters out bad packets so quickly that your legitimate users experience absolutely no lag or downtime.
  • Hardware-accelerated processing ensures mitigation occurs at wire-speed without adding latency.
  • Distributed synchronization ensures threats stopped in one region are instantly blocked globally.
CoreEdge™ — Live Mitigation
ACTIVE
Incoming
1.2 Tbps
Mixed Vector
Scrubbed
1.18 Tbps
98.5% Dropped
Clean Out
18 Gbps
Legitimate
Attack Vector Breakdown
UDP Amplification847 Gbps
SYN Flood284 Gbps
DNS Reflection89 Gbps
✓ Zero Added Latency — All vectors fully mitigated
Smart Detection

CoreDetection™ — Application (L7) Shield

Intelligent Botnet & HTTP Flood Protection

CoreDetection is the intelligence that constantly monitors your traffic. It specializes in identifying Application Layer (L7) attacks, stealthy HTTP floods, and evolving botnets, making sure ONLY clean, legitimate users reach your services.

  • HTTP/HTTPS Flood Mitigation: Detects and stops coordinated GET/POST floods intended to overwhelm your web servers.
  • Slow-Rate Attack Mitigation: Neutralizes stealth attacks like Slowloris that attempt to tie up server connections over long periods.
  • Smart Botnet Recognition: Identifies malicious bot traffic mimicking human behavior, blocking them before they overwhelm your login or checkout pages.
  • No False Positives: Accurately distinguishes between a real attack and legitimate traffic spikes, ensuring you never block real customers.
  • Automatically translates attack patterns into actionable CoreEdge rules without human intervention.
CoreDetection™ — L7 AI Engine
SCANNING
Real-time Threat Analysis
HTTP Flood — 45K req/s from 12K unique IPs
Botnet Pattern: Rotating UA + Cookie Replay
BLOCKED
Slowloris — 800 half-open connections
Pattern: Incremental header injection
DROPPING
Legitimate Traffic — 2.1K req/s
Fingerprint verified: Browser JS + TLS match
ALLOWED
0
False Positives
0.3s
Detection Time
L3-L7
Coverage
Core Engine

XDP — eXpress Data Path

Ultra-Fast Packet Processing at NIC Level

XDP (eXpress Data Path) is a high-performance, programmable network data path in the Linux kernel that enables packet processing at the earliest possible point — before the kernel network stack is even involved. This dramatically reduces latency and increases throughput for DDoS filtering.

  • Processes packets directly at the Network Interface Card (NIC) driver level
  • Bypasses the entire Linux kernel network stack for matched packets
  • Enables line-rate packet processing on standard commodity hardware
  • Paired with Mellanox ConnectX-6 SmartNICs for hardware-accelerated offloading
  • Achieves millions of packets per second filtering on a single core
  • Zero packet loss during high-volume DDoS attack mitigation
XDP — Packet Processing Pipeline
WIRE-SPEED
1
NIC Driver Hook
Packet intercepted before kernel stack
~100ns
2
eBPF Program Execution
Custom filter logic applied per-packet
XDP_DROP
3
Clean Traffic Forwarded
Only verified packets reach your servers
XDP_PASS
~100ns
Per-Packet Latency
10M+
PPS per Core
Innovation

eBPF — Extended Berkeley Packet Filter

Custom Kernel-Level Packet Logic

eBPF allows developers to run sandboxed programs in the Linux kernel without requiring kernel source code changes or loading kernel modules. CoreTech leverages eBPF to implement custom, application-specific DDoS detection and filtering logic that generic solutions cannot provide.

  • Custom packet processing programs run safely in kernel space
  • Application-specific filters for gaming, streaming, VoIP, and more
  • Real-time packet inspection with nanosecond decision making
  • Dynamic rule updates without any service interruption or restart
  • Programmable response to evolving attack signatures
  • Cannot be replicated by legacy ASIC-based filtering systems
eBPF — Kernel Runtime
LOADED
// CoreTech eBPF filter — real-time packet logic
SEC("xdp")
int coreedge_filter(struct xdp_md *ctx) {
struct ethhdr *eth = data;
if (is_ddos_signature(pkt)) {
update_threat_map(src_ip);
return XDP_DROP; // ~100ns
}
return XDP_PASS;
}
Kernel
Exec Level
Sandboxed
Safe Runtime
Live Update
No Restart
Hardware

Mellanox ConnectX-6 SmartNICs

Hardware-Accelerated DDoS Filtering

CoreTech deploys Mellanox (NVIDIA) ConnectX-6 SmartNICs at every network node. These intelligent NICs offload XDP packet processing directly to the card's onboard FPGA-like programmable logic, freeing host CPU resources and enabling packet processing at true wire speed.

  • 100 Gbps per port with hardware DDoS offloading capability
  • XDP program execution on NIC hardware without CPU involvement
  • Packet classification and filtering at full line rate
  • RDMA support for ultra-low latency traffic management
  • Hardware timestamps for precise traffic analysis and reporting
  • Deployed globally across our network infrastructure
Mellanox ConnectX-6 — Hardware Status
OFFLOADED
Port 0
100G
QSFP28 — Link UP
73 Gbps utilized
Port 1
100G
QSFP28 — Link UP
58 Gbps utilized
Hardware Offload Stats
XDP Programs12 loaded
HW Flow Rules48,293
CPU Offload98.7%
RDMA SessionsActive
200 Gbps total — Zero CPU overhead

Experience the Technology

See how CoreTech's eBPF/XDP stack protects real-world networks from modern DDoS attacks.