[191638] in North American Network Operators' Group
Re: Krebs on Security booted off Akamai network after DDoS attack
daemon@ATHENA.MIT.EDU (Patrick W. Gilmore)
Fri Sep 23 21:25:29 2016
X-Original-To: nanog@nanog.org
From: "Patrick W. Gilmore" <patrick@ianai.net>
In-Reply-To: <CABC6K16KTM0DVXXumOCrs-w+cGPh+n2Z09K_QPSP4a0NqEN+5w@mail.gmail.com>
Date: Fri, 23 Sep 2016 15:26:14 -0400
To: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
Is CloudFlare able to filter Layer 7 these days? I was under the =
impression CloudFlare was not able to do that.
There have been a lot of rumors about this attack. Some say reflection, =
others say Layer 7, others say .. other stuff. If it is Layer 7, how are =
you going to =E2=80=98step in front of the cannon=E2=80=99? Would you =
just pass through all the traffic?
I realize Matthew is always happy for publicity (hell, the whole planet =
is aware of that). But if your system cannot actually do the required =
task, I=E2=80=99m not sure your company should give you credit for =
offering a service the user cannot use.
--=20
TTFN,
patrick
> On Sep 23, 2016, at 3:16 PM, Justin Paine via NANOG <nanog@nanog.org> =
wrote:
>=20
> FWIW, we have offered to help. No word so far. We're more than willing
> to step in front of the cannon pointed his way.
>=20
> ____________
> Justin Paine
> Head of Trust & Safety
> CloudFlare Inc.
> PGP: BBAA 6BCE 3305 7FD6 6452 7115 57B6 0114 DE0B 314D
>=20
>=20
> On Fri, Sep 23, 2016 at 11:58 AM, Marcin Cieslak <saper@saper.info> =
wrote:
>> On Fri, 23 Sep 2016, jim deleskie wrote:
>>=20
>>> They were hosting him for free, and like insurance, I can assure you =
if you
>>> are consistently using a service, and not covering the costs of that
>>> service you won't be a client for long. This is the basis for =
AUP/client
>>> contracts and have been going back to the days when we all offered =
only
>>> dialup internet.
>>=20
>> Does being a victim of a DDoS constitute a breach of AUP?
>>=20
>> Marcin Cie=C5=9Blak
