[133329] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Over a decade of DDOS--any progress yet?

daemon@ATHENA.MIT.EDU (Thomas Mangin)
Wed Dec 8 12:51:39 2010

From: Thomas Mangin <thomas.mangin@exa-networks.co.uk>
In-Reply-To: <63CF5704-B49D-43D5-BC8E-F76336CD0005@arbor.net>
Date: Wed, 8 Dec 2010 17:51:31 +0000
To: "Dobbins, Roland" <rdobbins@arbor.net>
Cc: North American Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


On 8 Dec 2010, at 15:40, Dobbins, Roland wrote:

> On Dec 8, 2010, at 10:36 PM, Thomas Mangin wrote:
>=20
>> If you are a smaller network, you need the filtering to be performed =
by your transit provider, as your uplink will otherwise be congested.
>=20
> Actually, most DDoS attacks aren't link-flooding attacks - this hasn't =
been true for the last ~7 years or so.
>=20
> I'm not saying it doesn't happen, because it does, and sometimes quite =
spectacularly - but in most cases, the attackers don't have to flood the =
link to achieve their desired goal.

Fair point. I never had to face any intelligent type of DDOS ... lucky =
me :)

Thomas=


home help back first fref pref prev next nref lref last post