[121860] in North American Network Operators' Group
RE: DDoS mitigation recommendations
daemon@ATHENA.MIT.EDU (Stefan Fouant)
Thu Jan 28 21:22:36 2010
From: "Stefan Fouant" <sfouant@shortestpathfirst.net>
To: "'Christopher Morrow'" <morrowc.lists@gmail.com>,
"'Jeffrey Lyon'" <jeffrey.lyon@blacklotus.net>
In-Reply-To: <75cb24521001280855i718fbaa5k5230ab92cd251a8a@mail.gmail.com>
Date: Thu, 28 Jan 2010 21:22:16 -0500
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
> -----Original Message-----
> From: Christopher Morrow [mailto:morrowc.lists@gmail.com]
> Sent: Thursday, January 28, 2010 11:56 AM
> To: Jeffrey Lyon
> Cc: nanog@nanog.org
> Subject: Re: DDoS mitigation recommendations
>
> On Thu, Jan 28, 2010 at 10:00 AM, Jeffrey Lyon
> <jeffrey.lyon@blacklotus.net> wrote:
> > IntruGuard is highly customizable both from the GUI and CLI with the
> > engineer's assistance. Its the highest performance, reasonably priced
> box
> > that we've tried so far.
>
> 'highest performance' == 100mbps on a 1gbps copper interface? or
> sessions setup/second? or remote-addresses tracked? or ?
sessions setup/second = ddos mitigation fail ;)
Stefan Fouant, CISSP, JNCIE-M/T
www.shortestpathfirst.net
GPG Key ID: 0xB5E3803D