[169084] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

DNS/NTP , a solution !

daemon@ATHENA.MIT.EDU (Thomas Mangin)
Wed Feb 12 11:57:48 2014

From: Thomas Mangin <thomas.mangin@exa-networks.co.uk>
Date: Wed, 12 Feb 2014 16:57:13 +0000
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


--Apple-Mail=_3432E32B-5714-4540-81CD-F64BF4848643
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Hello,

Because :
 - Exa has been under attack way too much these last weeks
 - We hate to have to deal with it

Because:
 - Andrisoft seems cool but does not do FlowSpec
 - Arbor is known for its price (and features)
 - I am from Yorkshire (How much do you pay me to find bugs in your =
shinny application ?)

Because:
 - We can ...
 - And people can not be bothered to fix the problem at source !

I have been working on making our internal tool ( Thank you Daniel ) =
something which can be built on and released to the community.
The repository is here: https://github.com/Exa-Networks/exaddos

The code is not even one week old but it can :
 - use SNMP to monitor your EBGP interfaces
 - parse IPFIX to find your top speakers
 - provide you the data in an HORRIBLE web page ( but all the rendering =
is client side, so feel free to fix that !)

Now I would love some help ... I am NOT a web designer who find =
Javascript easy (I can handle jquery and basic stuff but nice CSS is not =
my cup of tea), so it will not look nice unless someone else make it so.

 I can provide the underlying data via JSON in whatever way one may need =
to allow :
 - graphing of links
 - allow to drill down on top speakers to find proto / ports information
 - "one click" get rid of that DDOS for <IP> <proto>

I did some of this stuff with ExaProxy so I am not totally useless but =
god knows it is not my strength !

So any help would be welcome, so I can go back on coding on BGP and not =
DDOS.

Thomas

PS: I created a G+ community ExaDDOS .. I will try to add a mailing list =
later on.


--Apple-Mail=_3432E32B-5714-4540-81CD-F64BF4848643
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org

iEYEARECAAYFAlL7p+kACgkQA/52wvuLgaFa1wCfcciltDIYNuOCxpmu/J8FaUq8
1YMAniZiQc9dMXrsE5SjRbjDGWf5GYRJ
=q/ro
-----END PGP SIGNATURE-----

--Apple-Mail=_3432E32B-5714-4540-81CD-F64BF4848643--


home help back first fref pref prev next nref lref last post