nanog mailing list archives

Re: I don't need no stinking firewall!


From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Wed, 6 Jan 2010 04:53:17 +0000


On Jan 6, 2010, at 11:43 AM, George Bonser wrote:

 Yes, you have to take some of the things that were done in one spot and do
them in different locations now, but the results are an amazing increase
in service capacity per dollar spent on infrastructure.

I strongly agree with the majority of your comments, with the caveat that I've seen many, many load-balancers fall over 
due to state-exhaustion, too; load-balancers need northbound protection from DDoS (S/RTBH, flow-spec, IDMS, et. al.), 
as well.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

    Injustice is relatively easy to bear; what stings is justice.

                        -- H.L. Mencken





Current thread: