[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

D/DoS mitigation hardware/software needed.

Subject: D/DoS mitigation hardware/software needed.
From: rdobbins at arbor.net (Dobbins, Roland)
Date: Tue, 5 Jan 2010 05:08:27 +0000
In-reply-to: <[email protected]>
References: <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]>

On Jan 5, 2010, at 12:05 PM, Rick Ernst wrote:

> 
> A solution preferably that integrates with NetFlow and RTBH.  An in-line solution obviously requires an appliance, or at least special/additional hardware.

The key is to not be inline all the time, but only inline *when needed*.  This removes operational complexity, provides the ability to oversubscribe, and simplifies the routine troubleshooting matrix.

> I'm looking at taking the first whack at immediate mitigation at the border/edge (upstream) via uRPF and RTBH.  

Good plan.

> Additional mitigation would be  via manual or automatic RTBH or security/abuse@ involvement with upstreams.

Automagic is generally bad, as it can be gamed.  

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

    Injustice is relatively easy to bear; what stings is justice.

                        -- H.L. Mencken

Follow-Ups:
- D/DoS mitigation hardware/software needed.
  - From: nanog at shreddedmail.com (Rick Ernst)
- D/DoS mitigation hardware/software needed.
  - From: ops.lists at gmail.com (Suresh Ramasubramanian)

References:
- D/DoS mitigation hardware/software needed.
  - From: nanog at shreddedmail.com (Rick Ernst)
- D/DoS mitigation hardware/software needed.
  - From: jeffrey.lyon at blacklotus.net (Jeffrey Lyon)
- D/DoS mitigation hardware/software needed.
  - From: rdobbins at arbor.net (Dobbins, Roland)
- D/DoS mitigation hardware/software needed.
  - From: jeffrey.lyon at blacklotus.net (Jeffrey Lyon)
- D/DoS mitigation hardware/software needed.
  - From: ops.lists at gmail.com (Suresh Ramasubramanian)
- D/DoS mitigation hardware/software needed.
  - From: jeffrey.lyon at blacklotus.net (Jeffrey Lyon)
- D/DoS mitigation hardware/software needed.
  - From: rdobbins at arbor.net (Dobbins, Roland)
- D/DoS mitigation hardware/software needed.
  - From: morrowc.lists at gmail.com (Christopher Morrow)
- D/DoS mitigation hardware/software needed.
  - From: nanog at shreddedmail.com (Rick Ernst)

Prev by Date: D/DoS mitigation hardware/software needed.
Next by Date: D/DoS mitigation hardware/software needed.
Previous by thread: D/DoS mitigation hardware/software needed.
Next by thread: D/DoS mitigation hardware/software needed.
Index(es):
- Date
- Thread