[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[c-nsp] DNS amplification

Subject: [c-nsp] DNS amplification
From: jared at puck.nether.net (Jared Mauch)
Date: Tue, 19 Mar 2013 14:32:36 -0400
In-reply-to: <[email protected]>
References: <CAB_zYdLuMntEdyU=UJgz8saGyA_Cq2-Y-UrM5=XnOPmvJ9=X6w@mail.gmail.com> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <CAO1bj=Zqvy+HbyEvLoyUgcvTn9BvmfoEXVfUfosPS3Aef4e34Q@mail.gmail.com> <CAL9jLabok0wUrYWN-CL2w_UEKJV4T+oGZTKDVWGkhAb=5qaEqQ@mail.gmail.com> <[email protected]> <CAL9jLaYgcbTdsor5VyuBOQ7hLZiQ-Sk72yemzcFpcD0sVbyL+g@mail.gmail.com> <[email protected]> <[email protected]>

On Mar 19, 2013, at 2:15 PM, "Patrick W. Gilmore" <patrick at ianai.net> wrote:

> Has anyone implemented (properly) FIB compression?

Since you say FIB, yes.  If all RIB prefixes and their sub-prefixes go the same next-hop, then you don't need to install additional entries in the FIB.  Some platforms only can install ~8k/second.  Reducing duplicate entries is always helpful.

One can't do RIB compression due to the nature of the protocol.

- Jared

References:
- [c-nsp] DNS amplification
  - From: jlewis at lewis.org (Jon Lewis)
- [c-nsp] DNS amplification
  - From: arturo.servin at gmail.com (Arturo Servin)
- [c-nsp] DNS amplification
  - From: mohta at necom830.hpcl.titech.ac.jp (Masataka Ohta)
- [c-nsp] DNS amplification
  - From: marka at isc.org (Mark Andrews)
- [c-nsp] DNS amplification
  - From: mohta at necom830.hpcl.titech.ac.jp (Masataka Ohta)
- [c-nsp] DNS amplification
  - From: rdobbins at arbor.net (Dobbins, Roland)
- [c-nsp] DNS amplification
  - From: mohta at necom830.hpcl.titech.ac.jp (Masataka Ohta)
- [c-nsp] DNS amplification
  - From: rdobbins at arbor.net (Dobbins, Roland)
- [c-nsp] DNS amplification
  - From: mohta at necom830.hpcl.titech.ac.jp (Masataka Ohta)
- [c-nsp] DNS amplification
  - From: aledm at qix.co.uk (Aled Morris)
- [c-nsp] DNS amplification
  - From: morrowc.lists at gmail.com (Christopher Morrow)
- [c-nsp] DNS amplification
  - From: drc at virtualized.org (David Conrad)
- [c-nsp] DNS amplification
  - From: morrowc.lists at gmail.com (Christopher Morrow)
- [c-nsp] DNS amplification
  - From: jared at puck.nether.net (Jared Mauch)
- [c-nsp] DNS amplification
  - From: patrick at ianai.net (Patrick W. Gilmore)

Prev by Date: [c-nsp] DNS amplification
Next by Date: [c-nsp] DNS amplification
Previous by thread: [c-nsp] DNS amplification
Next by thread: [c-nsp] DNS amplification
Index(es):
- Date
- Thread