[181624] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Trusted Networks Initiative: DDoS fallback set of AS'es

daemon@ATHENA.MIT.EDU (Bill Woodcock)
Mon Jun 29 20:10:29 2015

X-Original-To: nanog@nanog.org
From: Bill Woodcock <woody@pch.net>
In-Reply-To: <78C35D6C1A82D243B830523B4193CF5F9F3651C3E0@SBS1.blinker.local>
Date: Mon, 29 Jun 2015 17:10:09 -0700
To: David Hofstee <david@mailplus.nl>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org


--Apple-Mail=_56E77B28-4651-4BE4-B072-F876D72D0E4F
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8


> On Apr 16, 2015, at 3:58 AM, David Hofstee <david@mailplus.nl> wrote:
>=20
> Hi,
>=20
> I saw the following and thought it would be interesting to share. In =
case of a persistent DDoS an ASy can fallback to a small set of (more =
trustable) AS'es for their routing:
> http://www.trustednetworksinitiative.nl/

It is indeed an interesting proposal, though not one that=E2=80=99s =
perhaps fully informed of the intricacies of commercial routing =
economics.

Two things worthy of note for this audience, I think:

First, I don=E2=80=99t know that anyone is expecting networks that do =
not consider themselves to be principally Dutch in nationality to =
participate.

Second, this is a proposal of the Hague Security Delta, which is, in =
essence, a group of think-tanks.  It is not a proposal of the Dutch =
government, nor of the Dutch Internet Service Providers.  That is not =
intended to speak to the merit of the proposal, which has both good and =
bad points.  Just to indicate that it is neither a home-grown ISP thing, =
nor something the Dutch government is mandating or advocating.

                                -Bill





--Apple-Mail=_56E77B28-4651-4BE4-B072-F876D72D0E4F
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----
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=NdTB
-----END PGP SIGNATURE-----

--Apple-Mail=_56E77B28-4651-4BE4-B072-F876D72D0E4F--


home help back first fref pref prev next nref lref last post