nanog mailing list archives

Re: TCP-AMP DDoS Attack - Fake abuse reports problem


From: Töma Gavrichenkov <ximaera () gmail com>
Date: Fri, 21 Feb 2020 02:22:18 +0300

Peace,

On Fri, Feb 21, 2020, 1:57 AM Filip Hruska <fhr () fhrnet eu> wrote:

[..] OVH has been offering DDOS protection capable of soaking up hundreds
of gigabits+ per second as a standard with all their services for a long
time

They only do it for common trivial vectors like UDP-based amplification —
and other types easily handleable through flowspec.

Which is honestly not their fault because they try to keep their costs
down.  (Other means to keep the costs down may be of concern of Ronald G.
though, but that's a different story.)

However, TCP amplification is not of that sort.

--
Töma



Current thread: