RE: DDoS mitigation recommendations

["Stefan Fouant" <sfouant () shortestpathfirst net>]

> -----Original Message-----
> From: Christopher Morrow [mailto:morrowc.lists () gmail com]
> Sent: Thursday, January 28, 2010 11:56 AM
> To: Jeffrey Lyon
> Cc: nanog () nanog org
> Subject: Re: DDoS mitigation recommendations
>
> On Thu, Jan 28, 2010 at 10:00 AM, Jeffrey Lyon
> <jeffrey.lyon () blacklotus net> wrote:
> > IntruGuard is highly customizable both from the GUI and CLI with the
> > engineer's assistance. Its the highest performance, reasonably priced
> box
> > that we've tried so far.
>
> 'highest performance' == 100mbps on a 1gbps copper interface? or
> sessions setup/second? or remote-addresses tracked? or ?

sessions setup/second = ddos mitigation fail ;)

Stefan Fouant, CISSP, JNCIE-M/T
www.shortestpathfirst.net
GPG Key ID: 0xB5E3803D