Re: We have a firewall (was Re: Pakistan government orders ISP service level agreement)

[Rob Thomas <robt () cymru com>]

Hi, NANOGers.

] Now the DDoS melts the pipes _and_ the firewall.

Bonus prize:  A DDoS that wouldn't fill the pipe melts the firewall.
On the bright side the firewall will likely fail long before the
attack causes any noticeable pain to the components it is in place
to protect.  :|

 <http://www.kb.cert.org/vuls/id/539363>
 <http://www.qorbit.net/documents/maximizing-firewall-availability.pdf>
 <http://www.cymru.com/SteveGill/maximizing-firewall-availability.pdf>

Been there, somewhat survived that,
Rob.
-- 
Rob Thomas
http://www.cymru.com
ASSERT(coffee != empty);