nanog mailing list archives
Re: Blackhole Routes
From: Erik Haagsman <erik () we-dare net>
Date: Thu, 30 Sep 2004 16:40:54 +0200
On Thu, 2004-09-30 at 15:45, Robert A. Hayden wrote:
There are mechanisms to do it using eBGP and communities as well which I'm sure most on this list are more familiar with. Think of blackholing as a way to surgically remove a specific IP from your network, without having to deal with pushing ACLs into multiple entry points. At least that's what it accomplishes for us.
And perhaps more importantly, when using eBGP blackholing communities, without DDoS traffic hitting your ingress bandwidth from your upstreams. ACL's can only filter traffic that's already at your edge, whereas blackholing allows your upstream to filter it for you throughout his network, reducing the risk of congested links. Cheers, -- --- Erik Haagsman Network Architect We Dare BV tel: +31(0)10 7507008 fax:+31(0)10 7507005 http://www.we-dare.nl
Current thread:
- Blackhole Routes Abhishek Verma (Sep 29)
- Re: Blackhole Routes Suresh Ramasubramanian (Sep 30)
- Re: Blackhole Routes Stephen J. Wilcox (Sep 30)
- Re: Blackhole Routes Michael . Dillon (Sep 30)
- Re: Blackhole Routes Robert A. Hayden (Sep 30)
- Re: Blackhole Routes Erik Haagsman (Sep 30)
- Re: Blackhole Routes Wayne E. Bouchard (Sep 30)
- Re: Blackhole Routes Deepak Jain (Sep 30)
- Re: Blackhole Routes Wayne E. Bouchard (Sep 30)
- Re: Blackhole Routes Richard A Steenbergen (Sep 30)
- Re: Blackhole Routes Mark Kasten (Sep 30)
- Re: Blackhole Routes Richard A Steenbergen (Sep 30)
- Re: Blackhole Routes Erik Haagsman (Sep 30)
- Re: Blackhole Routes Jeff Aitken (Sep 30)
- Re: Blackhole Routes Christopher L. Morrow (Sep 30)
- Re: Blackhole Routes Randy Bush (Sep 30)
- Re: Blackhole Routes Christopher L. Morrow (Sep 30)