nanog mailing list archives

Re: Over a decade of DDOS--any progress yet?


From: "Patrick W. Gilmore" <patrick () ianai net>
Date: Tue, 7 Dec 2010 23:32:16 -0500

On Dec 7, 2010, at 11:26 PM, Sean Donelan wrote:
On Mon, 6 Dec 2010, Patrick W. Gilmore wrote:
But as you and others have pointed out, not a lot of defense against
DDoS these days besides horsepower and anycast. :-)

Not just anycast.  I said distributed architecture.  There are more ways to distribute than anycast.

The content-side can be duplicated, replicated, distributed.  On the
eyeball-side its not as easy to replicate things.  DDOS against user
networks doesn't generate as much publicity, outside of the gammer world, but is also a problem.

Other than trying to hide your real address, what can be done to prevent
DDOS in the first place.

Don't piss people off on IRC? :)

-- 
TTFN,
patrick



Current thread: