Re: Outsourcing DDOS

[Christopher Morrow <morrowc.lists () gmail com>]

On Mon, Oct 24, 2011 at 3:29 PM, Stefan Fouant
<sfouant () shortestpathfirst net> wrote:
> On 10/24/2011 1:54 PM, Andreas Echavez wrote:
>
> > obviously they will get blocked. My personal experience is that when
> > you're
> > dealing with a DoS at the scale that you need Prolexic, there is simply no
> > one else that can handle that level of traffic.
>
> Andreas,
>
> I think there are a lot of people on this list that would argue with that
> statement.  As was mentioned earlier, AT&T, Verizon, and several others
> including Verisign have very ample networks capable of handling attacks just
> as large as Prolexic, if not bigger.
>
> One thing to note about Prolexic, where it stands out from some of the
> others is that it is a completely off-net solution.  Many of the other
> offerings from folks like Verizon require you to have WAN circuits connected
> to their network in order to avail of such a service (in other words, they
> will only scrub that which would normally traverse their network on it's way
> towards your WAN interface).
>
> Others like Verisign have (smartly) adopted a similar model to that of
> Prolexic.  They understand that requiring a physical connection into a
> provider's cloud is a monolithic approach (and certainly runs counter to
> today's mantra of offering up cloud-based services).

but... often the cost of scrubbing includes the cost of transit
to/from the remote provider, which is why 'cheapest' only counts for
an entire process, NOT for 'lookie, I bought the service!'.

either way, folks will learn one way or the other which works for them.

-chris

> Stefan Fouant
> JNCIE-SEC, JNCIE-SP, JNCIE-ER, JNCI
> Technical Trainer, Juniper Networks
>
> Follow us on Twitter @JuniperEducate