Observed arrival · 2026-10-11

Heimnull connects network-flow analytics to DDoS response

heimnull.com Visit website

Editorial interest 78/100 Selection signal · not a rating of the site

A self-hosted network tool described as turning router flow records into traffic analytics and a way to announce DDoS mitigations over BGP.

Landing page captured for the 2026-10-11 issue.

For: Network operators managing router flow data and DDoS response
Worth noticing: The setup path uses one Docker Compose command on Debian 13; BGP announcements are opt-in, with dry runs and hostgroup-by-hostgroup rollout.

Field notes

The setup path described on the page starts with a Docker Compose command on Debian 13, followed by router flow exports; routers appear when they send data. BGP is optional: an operator can add an iBGP session per router and enable FlowSpec or blackholes by hostgroup after a dry run. The feature list also names SNMP interface statistics, 95th-percentile traffic, saved searches, and CSV export.

Observed signals

Read the marks

Editorial observations of this landing page, not a rating.

○OpenPublic substance visible

✦PrettyNotable craft visible

●ProPolished or operationally mature

◎NicheUnusually specific use

One card from the complete issue

Cloudless Mushrooms

372,187 arrived 1,000 judged 980 catalogued Enter the complete issue