nanog mailing list archives

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey


From: Christopher Morrow <morrowc.lists () gmail com>
Date: Sat, 24 Sep 2016 12:55:22 -0400

On Sat, Sep 24, 2016 at 12:28 PM, Bill Woodcock <woody () pch net> wrote:


On Sep 24, 2016, at 7:47 AM, John Levine <johnl () iecc com> wrote:

Well...by anycast, I meant BGP anycast, spreading the "target"
geographically to a dozen or more well connected/peered origins.  At
that
point, your ~600G DDoS might only be around

anycast and tcp? the heck you say! :)

People who've tried it say it works fine.

It’s worked fine for 28 years, for me.




boy, it'd sure be nice if there were some 'science' and 'measurement'
behind such statements.
Didn't k-root do some anycast studies ~8-10 years back?

-chris
(note I'm totally a believer in anycast for tcp in the 'right'
circumstances, but often it feels like talking to climate-change-deniers
when proffering it as a solution)


Current thread: