nanog mailing list archives

Re: DDOS solution recommendation


From: Job Snijders <job () instituut net>
Date: Sun, 11 Jan 2015 16:07:18 +0100

On Sun, Jan 11, 2015 at 09:58:12PM +0700, Roland Dobbins wrote:
2. Protect yourself by having your upstream police Police UDP to some
baseline you are comfortable with.

This will come back to haunt you, when the programmatically-generated
attack traffic 'crowds out' the legitimate traffic and everything
breaks.

You can only really do this for ntp.

You can also consider adding CHARGEN and SSDP. 

Kind regards,

Job


Current thread: