A centralized data cleansing station where traffic is analyzed and malicious traffic (
ddos, known vulnerabilities and exploits) is removed. Scrubbing centers are often used in large enterprises, such as ISP and Cloud providers, as they often prefer to off-ramp traffic to an out of path centralized data cleansing station. When under attack, the traffic is redirected (typically using DNS or BGP) to the scrubbing center where an attack mitigation system mitigates the attack traffic and passes clean traffic back to the network for delivery. The scrubbing center should be equipped to sustain high volumetric floods at the network and application layers, low and slow attacks, RFC Compliance checks, known vulnerabilities and zero day anomalies.