[121023] in North American Network Operators' Group
Re: I don't need no stinking firewall!
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Fri Jan 8 03:29:05 2010
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: NANOG list <nanog@nanog.org>
Date: Fri, 8 Jan 2010 08:28:12 +0000
In-Reply-To: <20b13c6b1001080021y15656946r12d63a304d7ac5c3@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Jan 8, 2010, at 3:21 PM, Arie Vayner wrote:
> Further on, if you want to really protect against a real DDoS you would m=
ost likely would have to look at a really distributed solution, where the d=
ifferent geographical load balancing solutions come into play.
GSLB or whatever we want to call it is extremely useful from a general avai=
lability standpoint; however, the attackers can always scale up and really =
distribute their already-DDoS even further (they learned about routeservers=
and DNS tinkering years ago). =20
Architecture, visibility, and control are key, as are vendor/customer/peer/=
upstream/opsec community relationships.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Injustice is relatively easy to bear; what stings is justice.
-- H.L. Mencken
