Our Technology

Built on the Cutting Edge

CoreTech is one of the world's first adopters of eBPF/XDP technology for DDoS mitigation — delivering packet processing speeds and precision that legacy systems cannot match.

Multi-Tbps
Total Filtering Capacity
Extensive IXs
Internet Exchanges Connected
Multiple
TIER1 Transit Providers
Global Range
Global BGP Peers
<1 Second
Detection Response Time
99.99%
Network Uptime SLA
24/7/365
Support Availability
Traffic Flow

How CoreDetection Works

From raw edge traffic to purified packets in under 1 second.

01
Raw Traffic Arrives
Mixed legitimate and attack packets hit the network edge
02
sFlow / NetFlow Sampling
Traffic is sampled and exported to analysis clusters
03
CoreDetection™ AI Analysis
L3-L7 behavioral neural analysis identifies threats in real-time
04
Threat Verdict & Rules
Attack classified and firewall rules auto-generated
05
CoreEdge™ XDP Filter
Malicious packets dropped at NIC level via eBPF/XDP
06
Clean Traffic Delivered
Only verified legitimate packets reach your infrastructure
<1s
Detection to Mitigation
0
False Positives
100%
Mitigation Efficiency
L3-L7
Full-Stack Coverage
Appliance vs. Platform

Legacy Firewalls vs CoreTech

Why outdated ASIC and standard OS-based mitigations fail against modern polymorphic attacks.

CapabilityLegacy Appliances
CoreTech Platform Winner
Packet Processing SpeedLimited by OS Network StackeBPF/XDP (NIC Level)
Detection LogicStatic PPS/BPS ThresholdsLayer 7 Neural Rhythm AI
Rule Propagation Time2 - 5 MinutesSub-second Sync
Stateful Protection ScopeLocalized (Per Appliance)Global Consensus Across PoPs
False Positive RateHigh (Legit Traffic Dropped)Near Zero
Core Engine

XDP — eXpress Data Path

Ultra-Fast Packet Processing at NIC Level

XDP (eXpress Data Path) is a high-performance, programmable network data path in the Linux kernel that enables packet processing at the earliest possible point — before the kernel network stack is even involved. This dramatically reduces latency and increases throughput for DDoS filtering.

  • Processes packets directly at the Network Interface Card (NIC) driver level
  • Bypasses the entire Linux kernel network stack for matched packets
  • Enables line-rate packet processing on standard commodity hardware
  • Paired with Mellanox ConnectX-6 SmartNICs for hardware-accelerated offloading
  • Achieves millions of packets per second filtering on a single core
  • Zero packet loss during high-volume DDoS attack mitigation
XDP — Packet Processing Pipeline
WIRE-SPEED
1
NIC Driver Hook
Packet intercepted before kernel stack
~100ns
2
eBPF Program Execution
Custom filter logic applied per-packet
XDP_DROP
3
Clean Traffic Forwarded
Only verified packets reach your servers
XDP_PASS
~100ns
Per-Packet Latency
10M+
PPS per Core
Innovation

eBPF — Extended Berkeley Packet Filter

Custom Kernel-Level Packet Logic

eBPF allows developers to run sandboxed programs in the Linux kernel without requiring kernel source code changes or loading kernel modules. CoreTech leverages eBPF to implement custom, application-specific DDoS detection and filtering logic that generic solutions cannot provide.

  • Custom packet processing programs run safely in kernel space
  • Application-specific filters for gaming, streaming, VoIP, and more
  • Real-time packet inspection with nanosecond decision making
  • Dynamic rule updates without any service interruption or restart
  • Programmable response to evolving attack signatures
  • Cannot be replicated by legacy ASIC-based filtering systems
eBPF — Kernel Runtime
LOADED
// CoreTech eBPF filter — real-time packet logic
SEC("xdp")
int coreedge_filter(struct xdp_md *ctx) {
struct ethhdr *eth = data;
if (is_ddos_signature(pkt)) {
update_threat_map(src_ip);
return XDP_DROP; // ~100ns
}
return XDP_PASS;
}
Kernel
Exec Level
Sandboxed
Safe Runtime
Live Update
No Restart
Hardware

Mellanox ConnectX-6 SmartNICs

Hardware-Accelerated DDoS Filtering

CoreTech deploys Mellanox (NVIDIA) ConnectX-6 SmartNICs at every network node. These intelligent NICs offload XDP packet processing directly to the card's onboard FPGA-like programmable logic, freeing host CPU resources and enabling packet processing at true wire speed.

  • 100 Gbps per port with hardware DDoS offloading capability
  • XDP program execution on NIC hardware without CPU involvement
  • Packet classification and filtering at full line rate
  • RDMA support for ultra-low latency traffic management
  • Hardware timestamps for precise traffic analysis and reporting
  • Deployed globally across our network infrastructure
Mellanox ConnectX-6 — Hardware Status
OFFLOADED
Port 0
100G
QSFP28 — Link UP
73 Gbps utilized
Port 1
100G
QSFP28 — Link UP
58 Gbps utilized
Hardware Offload Stats
XDP Programs12 loaded
HW Flow Rules48,293
CPU Offload98.7%
RDMA SessionsActive
200 Gbps total — Zero CPU overhead

Experience the Technology

See how CoreTech's eBPF/XDP stack protects real-world networks from modern DDoS attacks.

Request a Demo View Our Services →