[133299] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Over a decade of DDOS--any progress yet?

daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Wed Dec 8 10:43:34 2010

From: "Dobbins, Roland" <rdobbins@arbor.net>
To: North American Operators' Group <nanog@nanog.org>
Date: Wed, 8 Dec 2010 15:40:52 +0000
In-Reply-To: <FF95A325-7231-453A-AD01-5FF279CC2D22@exa-networks.co.uk>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


On Dec 8, 2010, at 10:36 PM, Thomas Mangin wrote:

> If you are a smaller network, you need the filtering to be performed by y=
our transit provider, as your uplink will otherwise be congested.

Actually, most DDoS attacks aren't link-flooding attacks - this hasn't been=
 true for the last ~7 years or so.

I'm not saying it doesn't happen, because it does, and sometimes quite spec=
tacularly - but in most cases, the attackers don't have to flood the link t=
o achieve their desired goal.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>

 	       Sell your computer and buy a guitar.






home help back first fref pref prev next nref lref last post