Re: VoIP Provider DDoSes

[Mike Hammett <nanog () ics-il net>]

Fail2Ban on a couple of dozen servers may not be sufficient to address 400 gigs of traffic. 




----- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 

Midwest-IX 
http://www.midwest-ix.com 

----- Original Message -----

From: "Terrance Devor" <ter.devor () gmail com> 
To: "Mike Hammett" <nanog () ics-il net> 
Cc: "NANOG" <nanog () nanog org> 
Sent: Wednesday, September 22, 2021 10:24:07 AM 
Subject: Re: VoIP Provider DDoSes 


Fail2Ban and give ourselves a pat on the back.. 


On Wed, Sep 22, 2021 at 9:12 AM Mike Hammett < nanog () ics-il net > wrote: 




https://twit.tv/shows/security-now/episodes/837?autostart=false 




It looks like Security Now covered this yesterday. They claimed that, "There is currently no provider of large pipe 
VoIP protocol DDoS protection." 


Are any of the cloud DDoS mitigation services offering a service like this. 



From: "Mike Hammett" < nanog () ics-il net > 
To: "NANOG" < nanog () nanog org > 
Sent: Tuesday, September 21, 2021 4:19:42 PM 
Subject: VoIP Provider DDoSes 


As many may know, a particular VoIP supplier is suffering a DDoS. https://twitter.com/voipms 


Are your garden variety DDoS mitigation platforms or services equipped to handle DDoSes of VoIP services? What nuances 
does one have to be cognizant of? A WAF doesn't mean much to SIP, IAX2, RTP, etc. 




----- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 

Midwest-IX 
http://www.midwest-ix.com