DDoS protection
Clean pipe at our edge for on-net transit customers. No BGP redirection.
We filter inbound attack traffic inline because we are already in the path. FlowSpec and RTBH at the edge.
Limit: protects on-net customers only. Not for traffic that does not traverse AS61573.