[160122] in North American Network Operators' Group
Re: box against dos/ddos
daemon@ATHENA.MIT.EDU (Kenneth McRae)
Thu Jan 31 13:47:15 2013
In-Reply-To: <510ABA65.1040905@jcoley.net>
Date: Thu, 31 Jan 2013 10:47:03 -0800
From: Kenneth McRae <kenneth.mcrae@dreamhost.com>
To: Jay Coley <j@jcoley.net>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
I think Radware has to sit inline. I do not believe they offer BGP offramp,
so keep that in mind.
On Thu, Jan 31, 2013 at 10:39 AM, Jay Coley <j@jcoley.net> wrote:
> +1 for Radware
>
> On 31/01/2013 18:36, dennis wrote:
> > Agreed, my shortlist for evaluation would include Arbor, Radware and
> > Genie NRM. New players to the market include just about every IPS and
> > application load balancing solution out there.
> >
> >
> > --------------------------------------------------
> > From: "Suresh Ramasubramanian" <ops.lists@gmail.com>
> > Sent: Thursday, January 31, 2013 10:23 AM
> > To: "Piotr" <piotr.1234@interia.pl>
> > Cc: <nanog@nanog.org>
> > Subject: Re: box against dos/ddos
> >
> >> arbor peakflow to start with?
> >>
> >> On Thursday, January 31, 2013, Piotr wrote:
> >>
> >>> Hi,
> >>>
> >>> I looking some box (vendor, model), which i can put out of the
> >>> main/product network, which can analyze packets
> >>> netflow,sflow,syslog from
> >>> bgp router(s) and after discover some anomaly it can do some action,
> for
> >>> example:
> >>>
> >>> - Box have bgp session with bgp router and advertise attacked ip prefix
> >>> with some community. Bgp router set next-hop for this prefix to
> >>> /dev/null
> >>>
> >>> Normal traffic via bgp router is about 1G/s in and 10G/s out
> >>>
> >>> What is worth of looking and what you suggest ?
> >>>
> >>> thanks for help,
> >>> Piotr
> >>>
> >>>
> >>
> >> --
> >> --srs (iPad)
> >>
> >
> >
> >
>
>
>
>
>
