[94784] in North American Network Operators' Group
Re: Hackers hit key Internet traffic computers
daemon@ATHENA.MIT.EDU (Joe Abley)
Thu Feb 8 08:56:09 2007
In-Reply-To: <45CA359B.7060709@gmail.com>
Cc: Douglas Otis <dotis@mail-abuse.org>,
Jeff Kell <jeff-kell@utc.edu>, nanog@merit.edu
From: Joe Abley <jabley@ca.afilias.info>
Date: Thu, 8 Feb 2007 08:53:33 -0500
To: virendra.rode@gmail.com
Errors-To: owner-nanog@merit.edu
On 7-Feb-2007, at 15:24, virendra rode // wrote:
> Looking at these attacks, F in particular, if my memory serves me
> correct, there are 35 f-root anycast nodes deployed. Maybe this helped
> in some respect.
Dave Knight's lightning talk in Toronto seemed to indicate that F's
anycast platform did a good job at sinking the bulk of the attack
traffic in Seoul and Beijing, and that the spill-over from the region
was mopped up easily by the very large nodes in California. Most
other locations that have a local F-root server saw very little impact.
Isolation of attack traffic seems like a big help to me.
> Then again, I like to see what kind of analysis comes out from the
> collected data.
Joe