F5 Distributed Cloud DDoS Mitigation BYOIP Integration Overview
Worth Knowing
SOC enablement comes before console management. Not automatic. IPv6 minimum and the current route-origin ASN are not stored.
Searching for the best IP providers? F5 Distributed Cloud DDoS Mitigation protects customer networks with routed L3/L4 mitigation. F5's security operations team enables the service first. After that, you manage protected network entities and route advertisements in the console. Always-on and on-demand modes are available. This is not automatic onboarding, and it is not a generic BIG-IP or DNS-proxy deployment.
Provider Details
| Field | Information |
|---|---|
| Provider Name | F5 Distributed Cloud |
| Website | f5.com |
| ASN(s) | Not stored. Legacy Defense.Net network identity is not proof of the origin used for a current Distributed Cloud route. |
| Tech Article & Date | Routed DDoS configuration guide - checked 7 October 2026 |
| BYOIP Scope | Routed L3/L4 DDoS Mitigation for customer networks. |
| Supported Versions | IPv4: /24 minimum. IPv6: a minimum customer-prefix length is not established. |
Caveats and Gotchas
- SOC enablement comes before console management. Route announcement and suppression in the console or API are not automatic onboarding.
- An LOA is required for delegated control. SOC may supply a template. IRR objects and ROAs are listed in onboarding prerequisites. Ask F5 which registry and origin apply.
- You need a registry-issued ASN or explicit authorization to use another organization's ASN.
- A ROA guide that mentions ARIN does not limit the service to ARIN customers.
Technical Requirements
| Requirement | Details |
|---|---|
| Prefix Size | IPv4 /24. IPv6 minimum not established. |
| LOA | Accepted and required for delegated control. |
| Return path | GRE and private connectivity. Locations are agreed during onboarding. |
| Modes | Always On, or Always Available for the on-demand mode. |
Step-by-Step BYOIP Process
Step 1
F5's security operations team enables the routed DDoS service.
This step is assisted, not a self-serve import.
Step 2
After enablement, manage protected networks and route advertisements in the console.
Step 3
Pricing is a quote.
There is no verified public fixed fee.
Related Resources
Published 7 October 2026