Re: UDP Amplification DDoS - Help!

2016-02-08 Thread Tin, James
Hi Mitch. My colleagues in the US dealt with something like this and I have dealt with something similar to this in Australia. Does your customer happen to be a school district? In our cases it turned out to be students buying Ddos as a service and targeting the address which comes up when they

Re: ISP marking ipsec traffic based on certificate, how is this possible?

2015-12-18 Thread Tin, James
If you’re using certificates, It could be possible you may have changed your VPN from IPSEC to SSLVPN. In which case it now runs over TCP port 443. So maybe they’re not doing traffic shaping on TCP 443. James On 18/12/2015 2:21 pm, "Nick Ellermann" wrote: >Sure your VPN tunnel wasn't 'stuck

Re: DDoS Mitigation

2015-11-04 Thread Tin, James
This is my first post to Nanog. So please don't flame me down ;) Hi Mario. Typically the cost of Ddos mitigation is charged on the amount of clean traffic inbound to your network, the number of protected /24 ranges you need protected and the number of datacentres you want to protect. Ideally t