Re: D/DoS mitigation hardware/software needed.

[Jeffrey Lyon <jeffrey.lyon () blacklotus net>]

We have such a configuration in progress, it works great without any of the
issues you're proposing.

Jeff

On Jan 4, 2010 9:09 PM, "Dobbins, Roland" <rdobbins () arbor net> wrote:

On Jan 5, 2010, at 4:25 AM, Jeffrey Lyon wrote: > Use a robust firewall such
as a Netscreen in fro...
Absolutely not - the firewall will fall over due to state-table exhaustion
before the mitigation system will.  Firewalls (which have no place in front
of servers in the first place), load-balancers, and any other stateful
devices should be southbound of the mitigation system.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

   Injustice is relatively easy to bear; what stings is justice.

                       -- H.L. Mencken