nanog mailing list archives

Re: syn flood attacks from NL-based netblocks


From: "Valdis Klētnieks" <valdis.kletnieks () vt edu>
Date: Mon, 19 Aug 2019 13:56:59 -0400

On Mon, 19 Aug 2019 20:44:47 +0300, T�ma Gavrichenkov said:

Not in a typical DC/ISP environment!  With the solution you propose, a
perfect routing symmetry is a hard requirement, b/c you need to make
sure a returning SYN/ACK hits the very same machine as the initial
SYN.

If your load balancer isn't doing something to make that situation work properly,
you need to talk to your vendor.

Attachment: _bin
Description:


Current thread: