Production-grade AI-powered DDoS detection and mitigation platform for software-defined networks and IoT environments.
NSDDOS packages telemetry collection, live attack simulation, SDN-aware mitigation, runtime verification, and SOC-style observability into one operator-facing workflow. It is built for local labs, demos, research validation, and repeatable release engineering around Floodlight, sFlowRT, Mininet, and Open vSwitch.
- Real-time DDoS attack detection
- Floodlight SDN controller integration
- sFlowRT telemetry engine
- Mininet virtual topology orchestration
- Open vSwitch programmable mitigation
- Live SOC-style operator dashboard
- ML-based anomaly detection engine
- Automated attack simulation
- Runtime health, doctor, and verification commands
- Public demo sharing through Cloudflare Tunnel
Install from PyPI:
pip install nsddosInstall from source for development:
git clone https://github.com/ns7523/nsddos.git
cd nsddos
python -m venv .venv
source .venv/bin/activate
pip install -e .[dev]Requirements:
- Python 3.11+
- Docker Engine
- Docker Compose v1 (
docker-compose) or v2 (docker compose) - Local runtime assets bundled in repo or downloaded through
nsddos bootstrap download
Full setup notes: docs/installation.md
nsddos setup
nsddos start
nsddos health --verboseRun live end-to-end showcase:
nsddos demoExpose dashboard publicly for demos:
nsddos ui exposeflowchart TD
user["User / Operator"] --> dash["NSDDOS Dashboard"]
dash --> flood["Floodlight Controller"]
dash --> sflow["sFlowRT Telemetry"]
dash --> detector["Detection + ML"]
flood --> ovs["Open vSwitch Mitigation Plane"]
sflow --> detector
detector --> ovs
ovs --> mininet["Mininet Topology"]
mininet --> h1["h1"]
mininet --> h2["h2"]
mininet --> h3["h3"]
More detail: docs/architecture.md
Core workflow:
nsddos health
nsddos doctor
nsddos start
nsddos demo
nsddos ui start
nsddos ui expose
nsddos lab start
nsddos runtime attack-liveCLI reference: docs/cli-reference.md
MIT. See LICENSE.