nanog mailing list archives

Re: upstream support for flowspec


From: Christopher Morrow <morrowc.lists () gmail com>
Date: Thu, 18 Sep 2014 14:12:15 -0400

On Thu, Sep 18, 2014 at 1:53 PM, Daniel Corbe <corbe () corbe net> wrote:
And once that happens, what are the chances of services providers
adopting this for their customers to make use of on as wide of a scale
as (for example) blackhole community strings.

I'd certainly *love* to have a way to mitigate an attack that doesn't
involve me sacrificing one service on my network to save the rest.

there are providers (verizon business, att, sprint, ntt at least) that
provide mitigation via bgp update... which is equivalent to the
blackhole community stuff, why not investigate those options? (or if
you had, what was lacking?)


Current thread: