nanog mailing list archives

Re: 80 Gbps ?


From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Tue, 22 Oct 2013 07:15:15 +0000


On Oct 22, 2013, at 8:19 AM, "jamie rishaw" <j () arpa com> wrote:

A)  /Seriously/ ?  80 Gbps ?


100gb/sec+ DDoS attacks have been seen for the last 3 years or more - 80gb/sec isn't that rare, unfortunately.  Most 
(but not all) of these very high-bandwidth DDoS attacks are DNS, SNMP, ntp, or game-server reflection/amplification 
attacks.

B) Other than dropping routes / changing DNS and "filtering at the borders"
are there controls that operators employ that help mitigate multi-Gbps
attacks?

S/RTBH, shutting down links, cooperative multi-operator mitigation, BCP38/84, etc.

---------------------------------
Roland Dobbins <rdobbins () arbor net>




Current thread: