[61239] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Lazy Engineers and Viable Excuses

daemon@ATHENA.MIT.EDU (Edward Lewis)
Tue Aug 26 12:38:09 2003

In-Reply-To: <20030825230805.GA87770@scylla.towardex.com>
Date: Tue, 26 Aug 2003 12:36:09 -0400
To: Haesu <haesu@towardex.com>
From: Edward Lewis <edlewis@arin.net>
Cc: Danny McPherson <danny@tcb.net>, nanog@merit.edu
Errors-To: owner-nanog-outgoing@merit.edu


At 19:08 -0400 8/25/03, Haesu wrote:
>  Managing a filter list on one or a few route-servers rather than an
>AS with hundred edge routers is so much time saving and less humanerror-prone.

But balance that with keep the path from filter list to route-server 
short too - because if you need to adjust a filter list in response 
to a network (or utility) emergency, you want to make sure the data 
is available.

(Based on experience with a project researching DDOS response.  We 
relied on certificates distributed by a DNS server.  When the flood 
was released, accessing DNS became impossible - the security system 
drowned in the flood.)
-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis                                            +1-703-227-9854
ARIN Research Engineer

Sponge Bob Square Pants?  I'm still trying to figure out the Macarena.

home help back first fref pref prev next nref lref last post