[120897] in North American Network Operators' Group
Re: I don't need no stinking firewall!
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Tue Jan 5 23:57:23 2010
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: NANOG list <nanog@nanog.org>
Date: Wed, 6 Jan 2010 04:53:17 +0000
In-Reply-To: <5A6D953473350C4B9995546AFE9939EE081F7168@RWC-EX1.corp.seven.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Jan 6, 2010, at 11:43 AM, George Bonser wrote:
> Yes, you have to take some of the things that were done in one spot and =
do
> them in different locations now, but the results are an amazing increase
> in service capacity per dollar spent on infrastructure.
I strongly agree with the majority of your comments, with the caveat that I=
've seen many, many load-balancers fall over due to state-exhaustion, too; =
load-balancers need northbound protection from DDoS (S/RTBH, flow-spec, IDM=
S, et. al.), as well.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Injustice is relatively easy to bear; what stings is justice.
-- H.L. Mencken
