T-ISP-036 · DDoS Scrubbing Path Validator

Validate the DDoS diversion/return path during a scrubbing event: confirm BGP diversion advertisement, scrubbing-center next-hop, GRE/return tunnel health, and clean-traffic reinjection.

Cisco IOS-XR

Juniper Junos

Arista EOS

Open in Generator Open in Platform

You're viewing a preview

The full script, parameters, and execution console are available with a free account.

Already have access? Sign in →

Capabilities

Diversion route check
Scrubber next-hop verify
Return-tunnel health
Clean reinjection path
Loop / black-hole guard
Pass/fail summary

Required inputs

Parameters the script accepts. Defaults shown; some are vendor- or context-gated.

Parameter	Type	Default	Notes
Target prefix under attack target_prefix	string	203.0.113.0/24	—
Expect diversion active expect_diverted	bool	true	—

Hint 1 — Name your vendors and OS versions

Mention the exact platforms you run (Cisco IOS-XR, Juniper Junos, Arista EOS) so the generated isp & peering logic uses the right CLI/NETCONF syntax.

Hint 2 — State your real thresholds

Provide concrete values for Target prefix under attack, Expect diversion active instead of the defaults — they shape what counts as a fault.

Hint 3 — Prioritize the checks you need

This tool can diversion route check and scrubber next-hop verify. Ask for the subset relevant to your incident to keep output focused.

Hint 4 — Describe your inventory format

Tell the assistant whether your device list is CSV, YAML, or JSON and which columns it has, so parsing matches your data.

Sample inventory schema

Authoritative shape of the device/policy data this script consumes.

No bundled inventory sample. The script accepts standard device lists (CSV/YAML) with hostname, mgmt IP, vendor, and credentials.

Expected output

Reference terminal output the script should produce — used as a stylistic and structural target.

terminal

2026-06-15 18:40:00 INFO  Validating scrubbing path for 203.0.113.0/24
2026-06-15 18:40:01 PASS  Diversion advertised to scrubbing-center
2026-06-15 18:40:01 PASS  Return tunnel gre1 up, clean reinjection ok
2026-06-15 18:40:01 INFO  Scrubbing path VALID (4/4 checks)