FastNetMon is a traffic analysis daemon that detects volumetric DDoS attacks in seconds and automatically triggers iptables blocks or BGP blackholing. This guide walks through setting it up on a Linux server with automated response scripts — no cloud scrubbing service required.