Re: Dragonfly

[Chris Green <cmgreen () UAB EDU>]

We know enough about it not to disconnect them for bandwidth abuse.  We
don't rate limit it as it's mainly going over our I2 links.  Stepping
back from being bandwidth police, it's an awesome P2P use as long as you
have bandwidth to support it.  We made sure our other P2P efforts don't
interfere.

> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Di Fabio, Andrea
> Sent: Wednesday, October 29, 2008 10:35 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] Dragonfly
>
> Are there institutions using Dragonfly from http://www.dragonfly.com ?
> If so, I would be interested in hearing if you are shaping this
> application's bandwidth or have taken any other measures to throttle
it
> down
> and control the IP addresses it talks to.
>
> One of our department has purchased the software and it seems to be
> very
> bandwidth thirsty.  In addition the P2P model they are using seems not
> to
> handle RFC1918 IP addresses so our internal sensors are triggering
when
> Dragonfly tries to connect to a peer over a private IP.