Cybersecurity Infrastructure

Protect networks with
automated RTBH filtering

Ingest local or remote threat feeds, compute route deltas, and publish controlled BGP blackhole announcements. First-party Debian packages, GHCR images, and a public APT repository.

Get Started Architecture

Live Build Metadata

Latest stable Loading...

Release commit ---

Published UTC ---

Archive key fingerprint ---

Loading release highlights...

Purpose RTBH automation

Normalize threat feeds into controlled BGP state.

Distribution APT, GHCR, source

One core service, several operator-ready paths.

Trust Signed Debian repo

Public key and fingerprint shipped reliably.

Deploy Seamlessly

Pick your delivery path.

Signed APT (Recommended)

Debian

The cleanest production path for apt-secure verification and updates.

sudo install -d -m 0755 /etc/apt/keyrings
curl -fsSL https://soakes.github.io/blackhole-threats/blackhole-threats-archive-keyring.gpg \
| sudo tee /etc/apt/keyrings/blackhole-threats-archive-keyring.gpg >/dev/null

sudo tee /etc/apt/sources.list.d/blackhole-threats.sources >/dev/null <<'EOF'
Types: deb deb-src
URIs: https://soakes.github.io/blackhole-threats/
Suites: stable
Components: main
Signed-By: /etc/apt/keyrings/blackhole-threats-archive-keyring.gpg
EOF

sudo apt update && sudo apt install blackhole-threats

GHCR runtime

Container

Use the published multi-arch image anywhere Docker runs.

docker pull ghcr.io/soakes/blackhole-threats:latest

docker run --rm -p 179:179 \
  -v "$PWD/config.yaml:/config/blackhole-threats.yaml:ro" \
  ghcr.io/soakes/blackhole-threats:latest

Ready to secure your routing?

Read the comprehensive operator manual for deeply customized feeds, peering configurations, and management tools.