[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

syn flood attacks from NL-based netblocks

Subject: syn flood attacks from NL-based netblocks
From: valdis.kletnieks at vt.edu (Valdis Klētnieks)
Date: Mon, 19 Aug 2019 14:27:33 -0400
In-reply-to: <CALZ3u+Yjbg11eVooD35B81nvtW8MmPUuzYrPexQ2no3x+BVhHA@mail.gmail.com>
References: <[email protected]> <[email protected]> <CAHBw0M8c9HxtOyx2a7vQzF1D7CYE29RDApzazQMUycvKqJ6yhg@mail.gmail.com> <CABSP1OfVX9Z7sOC9V3qrPXiuucxD_fU7uqrxyQ-VcUHnsYG_sw@mail.gmail.com> <CALZ3u+bfTJtyv3Nc9-JHYSOgDvQkCH55eW6joO0PL2GXKz-qKg@mail.gmail.com> <CABSP1Ocz9B0UUp0GB8BvHxY=HMp5S0SFmMmFzp19JMBe2n2CvA@mail.gmail.com> <CALZ3u+b_0RyqX6aK5ixZjJUgwGp09JkHvaGy+WwHKpHMrutN2A@mail.gmail.com> <201327.1566237419@turing-police> <CALZ3u+Yjbg11eVooD35B81nvtW8MmPUuzYrPexQ2no3x+BVhHA@mail.gmail.com>

On Mon, 19 Aug 2019 21:18:49 +0300, Tï¿½ma Gavrichenkov said:

> If you're doing load balancing for *outgoing* traffic â?? and in exactly the
> same manner as you do with incoming â?? then maybe.

On the other hand, your servers should probably be doing non-loadbalanced
outbound on a different IP address than the inbound load balancer, and thus the
syn-ack should have zero trouble getting back to the box it thought the syn
came from.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 832 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20190819/d4b4db78/attachment.sig>

Follow-Ups:
- syn flood attacks from NL-based netblocks
  - From: ximaera at gmail.com (Töma Gavrichenkov)

References:
- syn flood attacks from NL-based netblocks
  - From: nanog at shankland.org (Jim Shankland)
- syn flood attacks from NL-based netblocks
  - From: mike-nanog at tiedyenetworks.com (Mike)
- syn flood attacks from NL-based netblocks
  - From: amir.lists at gmail.com (Amir Herzberg)
- syn flood attacks from NL-based netblocks
  - From: damian at google.com (Damian Menscher)
- syn flood attacks from NL-based netblocks
  - From: ximaera at gmail.com (Töma Gavrichenkov)
- syn flood attacks from NL-based netblocks
  - From: damian at google.com (Damian Menscher)
- syn flood attacks from NL-based netblocks
  - From: ximaera at gmail.com (Töma Gavrichenkov)
- syn flood attacks from NL-based netblocks
  - From: valdis.kletnieks at vt.edu (Valdis Klētnieks)
- syn flood attacks from NL-based netblocks
  - From: ximaera at gmail.com (Töma Gavrichenkov)

Prev by Date: syn flood attacks from NL-based netblocks
Next by Date: syn flood attacks from NL-based netblocks
Previous by thread: syn flood attacks from NL-based netblocks
Next by thread: syn flood attacks from NL-based netblocks
Index(es):
- Date
- Thread