nanog mailing list archives

Re: whatever happened to RED? (was: Improving Robustness...)


From: Simon Leinen <simon () limmat switch ch>
Date: 13 Jul 2001 16:12:17 +0200


"was" == William Allen Simpson <wsimpson () greendragon com> writes:
Didn't we have a solution to this problem?  And the UDP flood from
Real?  And a host of other problems with saturated links?

My operational issue is: what is the status of RED?  Being small and
only having cisco and *nix routers, I'd expect it was widely
deployed.

RED alone doesn't help much against flooding attacks.  You'd need
something like "RED with penalty box" or (flow-based) WFQ, and those
are either in research status or have other fundamental problems.

Don't get me wrong, RED is extremely cool - buy only routers that
support this at line rate, and configure it on any interface where you
expect even a slight chance of congestion.
-- 
Simon.


Current thread: