nanog mailing list archives

Re: UDP/123 policers & status


From: Saku Ytti <saku () ytti fi>
Date: Mon, 30 Mar 2020 11:27:59 +0300

On Mon, 30 Mar 2020 at 11:15, Harlan Stenn <stenn () nwtime org> wrote:

Please help me understand this.

Exactly how bad is it if the query and response packets are of a
different size?  Does it matter at 4 bytes?  32?

Presumably, if it's attenuation vector (1byte or more), presumably
attacker will use any of the other many vectors which are
amplification vectors or will directly attack from the zombie machines
they pwn. Since NST would have negative ROI on attack if there is
_any_ attenuation.

-- 
  ++ytti


Current thread: