[183013] in North American Network Operators' Group
Re: Experience on Wanguard for 'anti' DDOS solutions
daemon@ATHENA.MIT.EDU (Job Snijders)
Mon Aug 10 10:12:31 2015
X-Original-To: nanog@nanog.org
Date: Mon, 10 Aug 2015 16:10:14 +0200
From: Job Snijders <job@instituut.net>
To: nanog@nanog.org, Marcel Duregards <marcel.duregards@yahoo.fr>
In-Reply-To: <CALgsdbcLEMxBtoLhTchN8ioC68VZnzrkcRCbv1ouzO6dRnyArw@mail.gmail.com>
Errors-To: nanog-bounces@nanog.org
On Mon, Aug 10, 2015 at 04:38:40PM +0300, Pavel Odintsov wrote:
> We have some open source software for this task
> https://github.com/FastVPSEestiOu/fastnetmon :) Feel free to ask me
> any questions off list.
I can attest that fastnetmon is a great tool for dealing with high pps
or high bandwidth attacks. Pavel thank you so much for sharing this!
Yesterday I deployed fastnetmon at a small non-profit ISP in Amsterdam
(AS8283). From the start of the attack to actually dealing with it by
announcing blackhole route plus /24 wrapper (to draw traffic via that
upstream), only takes four seconds.
Kind regards,
Job
