Re: It can be challenging to advise DDoS mitigation subscribers on their RPKI-ROA needs

pendent on > Validators downloading updated ROAs, which may be longer than the DDoS lasts. > > Lee > > > -Original Message- > From: NANOG On Behalf > Of Steven Wallace > Sent: Friday, October 18, 2024 9:50 AM > To: nanog@nanog.org > Subject: It can be chall

Re: It can be challenging to advise DDoS mitigation subscribers on their RPKI-ROA needs

>> what's an as-set? > An IRR object that contains ASNs and other as-sets. Generally used to > represent a network’s customer cone. ahhh. cool. i was worried you meant {1,2,3}, which is pretty much dead. randy

Re: It can be challenging to advise DDoS mitigation subscribers on their RPKI-ROA needs

12:32 PM To: Steven Wallace ; nanog@nanog.org Subject: Re: It can be challenging to advise DDoS mitigation subscribers on their RPKI-ROA needs DDoS mitigation providers normally originate a customer’s /24 or /48 with their ASN as the origin. This prefix is the most specific prefix which cover

Re: It can be challenging to advise DDoS mitigation subscribers on their RPKI-ROA needs

On 18 Oct 2024, at 13:17, Randy Bush wrote: >> In some cases, you can identify customers of DDoS mitigation services >> by looking at as-sets published by these providers > > what's an as-set? > > randy An IRR object that contains ASNs and other as-sets. Generally u

Re: It can be challenging to advise DDoS mitigation subscribers on their RPKI-ROA needs

> In some cases, you can identify customers of DDoS mitigation services > by looking at as-sets published by these providers what's an as-set? randy

Re: It can be challenging to advise DDoS mitigation subscribers on their RPKI-ROA needs

doesn’t know. Sometimes, there’s IRR objects that hint at what happens. Oh, and sometimes you need a third ROA to prevent a route object from being suppressed. steve On 18 Oct 2024, at 12:32, Compton, Rich wrote: DDoS mitigation providers normally originate a customer’s /24 or /48 with

Re: It can be challenging to advise DDoS mitigation subscribers on their RPKI-ROA needs

DDoS mitigation providers normally originate a customer’s /24 or /48 with their ASN as the origin. This prefix is the most specific prefix which covers the customer’s IP(s) under attack that will be accepted on the Internet. If a customer has created ROAs for the protected prefixes, they

RE: It can be challenging to advise DDoS mitigation subscribers on their RPKI-ROA needs

--- From: NANOG On Behalf Of Steven Wallace Sent: Friday, October 18, 2024 9:50 AM To: nanog@nanog.org Subject: It can be challenging to advise DDoS mitigation subscribers on their RPKI-ROA needs This message is from an EXTERNAL SENDER - be CAUTIOUS, particularly with links and attachment

It can be challenging to advise DDoS mitigation subscribers on their RPKI-ROA needs

DDoS mitigation services, particularly those that dynamically announce more specific routes during an attack, add complexity when advising customers on creating their RPKI-ROAs. Smaller organizations, often served by networks that provide DDoS mitigation on their behalf, might be unaware of

RE: Recommended DDoS mitigation appliance?

> This sounds like a different model to me. Kentik I think averages out around > $500 per 10G per month I was talking about Imperva

Re: Recommended DDoS mitigation appliance?

Phil, This sounds like a different model to me. Kentik I think averages out around $500 per 10G per month. Kentik doesn't do any scrubbing however. Does anyone have guide to DDoS services? Seems like there is a wide array of pricing and technology options. On Tue, Feb 4, 2020 at 7:50 AM Phil Lavi

Re: Recommended DDoS mitigation appliance?

gt;> >> Hello, NANOG! >> >> I'm in the midst of rebuilding/upgrading our backbone and peering - >> sessions cheerfully accepted :) - and am curious what folks recommend >> in the DDoS mitigation appliance realm? Ideally it would be capable >> of 10Gbps and circa

RE: Recommended DDoS mitigation appliance?

If you are looking for remote scrubbing, I can high recommend DDoS-Guard (ddos-guard.com), they do not have any “limits” on the size or the number of attacks, the billing is simply based on the clean bandwidth. The highest they have mitigated for us is about 40G. You can either have it in an alw

RE: Recommended DDoS mitigation appliance?

> So is Imperva similar to how Kentik operates? What was it priced liked? It is a nice model as you don't need additional hardware or virtual appliances on-prem, which cuts down on the CAPEX cost. Like everyone else, they price the scrubbing based on your clean traffic levels. Price I have is ci

Re: Recommended DDoS mitigation appliance?

Rabbi Rob Thomas wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >> >> >> Hello, NANOG! >> >> I'm in the midst of rebuilding/upgrading our backbone and peering - >> sessions cheerfully accepted :) - and am curious what folks rec

Re: Recommended DDoS mitigation appliance?

GIN PGP SIGNED MESSAGE- > Hash: SHA256 > > > Hello, NANOG! > > I'm in the midst of rebuilding/upgrading our backbone and peering - > sessions cheerfully accepted :) - and am curious what folks recommend > in the DDoS mitigation appliance realm? Ideally it would

Re: Recommended DDoS mitigation appliance?

Check out Wanguard -- Dmitry Sherman From: NANOG on behalf of Colton Conor Date: Wednesday, 29 January 2020 at 0:47 To: Mike Cc: NANOG Subject: Re: Recommended DDoS mitigation appliance? Mike, What did you end up going with if not fastnetmon? Were you using their paid or free version

Re: Recommended DDoS mitigation appliance?

Mike, The free trial is the paid version right? Just was wondering if you use the community or advanced paid version. On Wed, Jan 29, 2020 at 4:38 PM Mike wrote: > I had intended to use the paid version once the 'free trial' proved to > work, but for the previously mentioned reasons it did not

Re: Recommended DDoS mitigation appliance?

I had intended to use the paid version once the 'free trial' proved to work, but for the previously mentioned reasons it did not and I gave up. Would still love to have this style of solution in my network and still open to other solutions, just haven't really found anything else. On 1/28/20

Re: Recommended DDoS mitigation appliance?

Mike, What did you end up going with if not fastnetmon? Were you using their paid or free version? On Thu, Dec 5, 2019 at 4:45 PM Mike wrote: > > On 12/5/19 1:43 PM, Hugo Slabbert wrote: > >> FastNetMon is awesome, but its a detection tool with no mitigation > >> capacity whatsoever. > > > > Do

Re: DDoS Mitigation Survey

On 20 Jan 2020, at 23:34, Jean | ddostest.me wrote: > so one of the best option to fight DDoS is not available through > public information. I just posted a link to a public presentation which describes how to enable it on one's own network. Giving end-customers the ability to block using S/RT

Re: DDoS Mitigation Survey

On Mon, Jan 20, 2020 at 12:49 PM Jean | ddostest.me via NANOG < nanog@nanog.org> wrote: > uRPF loose or strict. > > Which ISP supports it? > > So far, I found none through public information. > > With all IPv4 space converging to being allocated, loose uRPF is almost useless at this point, or will

Re: DDoS Mitigation Survey

Exactly, so one of the best option to fight DDoS is not available through public information. @Lumin: You should start your investigation with uRPF loose. Best regards, Jean On 2020-01-20 11:31, Dobbins, Roland wrote: On 20 Jan 2020, at 22:49, Jean | ddostest.me wrote: uRPF loose or stri

Re: DDoS Mitigation Survey

On 20 Jan 2020, at 22:49, Jean | ddostest.me wrote: > uRPF loose or strict. Either. > Which ISP supports it? Some operators use it themselves. I don't know of any who allow customer-triggered S/RTBH; several offer customer-triggered D/RTBH. Rola

Re: DDoS Mitigation Survey

uRPF loose or strict. Which ISP supports it? So far, I found none through public information. On 2020-01-20 10:38, Dobbins, Roland wrote: On 20 Jan 2020, at 19:59, Jean | ddostest.me via NANOG wrote: Where can we find public information on how to use S/RTBH This .pdf preso on mitigation te

Re: DDoS Mitigation Survey

On 20 Jan 2020, at 19:59, Jean | ddostest.me via NANOG wrote: > Where can we find public information on how to use S/RTBH This .pdf preso on mitigation techniques describes how it works: Roland Dobbins

Re: DDoS Mitigation Survey

Where can we find public information on how to use S/RTBH and which providers support it. Thanks Jean On 2020-01-14 17:31, Dobbins, Roland wrote: There are literally decades of information on these topics available publicly. Router and switch ACLs (both static and dynamically-updated via flow

Re: DDoS Mitigation Survey

2) performance penalties that are introduced by deploying more filters than a router's data plane can support (i.e., data plane to control plane I/O limitation). We believe DDoS mitigation based on layer 3 and/or 4 information can be fine-grain. As a matter of fact, when we referred to

Re: DDoS Mitigation Survey

Hi Töma, Thank you for the feedback (that is a good point)! In our study, we lump both cloud/anycast-based and customer-premise mitigation solutions together as solutions from DDoS mitigation service providers. And we believe if you are well-provisioned with such equipment, you are not subject

Re: DDoS Mitigation Survey

ghtful. It certainly isn't a topic that one would imagine merits formal academic investigation, given that it's a commonplace amongst those involved in the operational community. It just isn't an interesting topic, in and of itself. Something broader in terms of operator percep

Re: DDoS Mitigation Survey

ers, > > > I am a senior Ph.D. student at the University of Oregon (UO). We are > seeking your help to understand DDoS mitigation techniques toward > volumetric link flooding attacks. > > > With our preliminary survey so far, DDoS mitigation approaches in the real > wo

Re: DDoS Mitigation Survey

Peace, On Wed, Jan 15, 2020, 2:35 AM Lumin Shi wrote: > Thank you for the feedback (that is a good point)! > > In our study, we lump both cloud/anycast-based and customer-premise > mitigation solutions together as solutions from DDoS mitigation service > providers. > And we

Re: DDoS Mitigation Survey

terally decades of information on these topics available publicly. Router and switch ACLs (both static and dynamically-updated via flow spec), D/RTBH, S/RTBH, intelligent DDoS mitigation systems (IDMSes; full disclosure, I work for a a vendor of such systems), et. al. are all used to mitigate D

Re: DDoS Mitigation Survey

Peace, On Tue, Jan 14, 2020, 10:22 PM Lumin Shi wrote: > With our preliminary survey so far, DDoS mitigation approaches in the real > world include 1) DDoS mitigation service providers (e.g., Akamai, > Cloudflare), 2) Remotely-Triggered Black Hole (RTBH), 3) BGP FlowSpec, and &g

DDoS Mitigation Survey

Dear NANOG members, I am a senior Ph.D. student at the University of Oregon (UO). We are seeking your help to understand DDoS mitigation techniques toward volumetric link flooding attacks. With our preliminary survey so far, DDoS mitigation approaches in the real world include 1) DDoS

Re: Recommended DDoS mitigation appliance?

On 12/5/19 1:43 PM, Hugo Slabbert wrote: FastNetMon is awesome, but its a detection tool with no mitigation capacity whatsoever. Does is not, though, provide the ability to hook into RTBH or Flowspec setups? Yes it does provide RTBH hook. I evaluated fastnetmon using exactly the 'quick

Re: Recommended DDoS mitigation appliance?

Peace, On Fri, Dec 6, 2019, 12:44 AM Hugo Slabbert wrote: > >FastNetMon is awesome, but its a detection tool with no mitigation > >capacity whatsoever. > > Does is not, though, provide the ability to hook into RTBH or Flowspec > setups? > Flowspec is enabled upstream, as previously prophecied.

Re: Recommended DDoS mitigation appliance?

FastNetMon is awesome, but its a detection tool with no mitigation capacity whatsoever. Does is not, though, provide the ability to hook into RTBH or Flowspec setups? -- Hugo Slabbert | email, xmpp/jabber: h...@slabnet.com pgp key: B178313E | also on Signal On Thu 2019-Dec-05 10:31:3

Re: Recommended DDoS mitigation appliance?

h uses Netflow to find unwanted traffic > - https://nsfocusglobal.com/anti-ddos-system-ads/ > > . Wanguard+Wanfilter > - https://www.andrisoft.com/software/wanguard > - https://www.andrisoft.com/software/wanguard/ddos-mitigation-protecti > on > > . A10

Re: Recommended DDoS mitigation appliance?

ilter - https://www.andrisoft.com/software/wanguard - https://www.andrisoft.com/software/wanguard/ddos-mitigation-protecti on . A10 Thunder ADC - https://a10networks.optrics.com/products/application-delivery.aspx . FastNetMon - Free or inexpensive - https://fastnetmon.com/ Thank you! Rob,

Re: Recommended DDoS mitigation appliance?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello, NANOG! Thank you to all who have generously given your time to respond publicly and privately. I have a long list of things to research while configuring our shiny new Juniper routers. :) I'll summarize to the list shortly. Be well! Rob,

Re: Recommended DDoS mitigation appliance?

It's a logical evolution as botnets became less of a tool for lulz and more of a economic asset to certain segments of the world. No sense launching an orbital strike where a garden hose will do the job just as well. On Mon, Nov 18, 2019 at 9:05 AM Tom Hill wrote: > On 18/11/2019 13:50, Mike Ha

Re: Recommended DDoS mitigation appliance?

SHA256 Hello, NANOG! I'm in the midst of rebuilding/upgrading our backbone and peering - sessions cheerfully accepted :) - and am curious what folks recommend in the DDoS mitigation appliance realm? Ideally it would be capable of 10Gbps and circa 14Mpps rate of mitigation. If you have a recomme

Re: Recommended DDoS mitigation appliance?

Peace, On Mon, Nov 18, 2019, 4:51 PM Mike Hammett wrote: > I would like the list to know that not all targets attract such large > attacks. > It is not that easily predictable. E.g. in case of reflection DDoS sometimes even the attacker has no good idea of how much of traffic s/he is generatin

Re: Recommended DDoS mitigation appliance?

On 18/11/2019 13:50, Mike Hammett wrote: > I would like the list to know that not all targets attract such large > attacks. I know many eyeball ISPs that encounter less than 10 gig > attacks, which can be reasonably absorbed\mitigated. Online gamers > looking to boot someone else from the game aren

Re: Recommended DDoS mitigation appliance?

gigs of resources to an attack. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com - Original Message - From: "Rabbi Rob Thomas" To: nanog@nanog.org Sent: Sunday, November 17, 2019 4:18:57 PM Subject: Recommend

Re: Recommended DDoS mitigation appliance?

>> size > >>>> dirty traffic are you expecting it to handle? > >>> > >>> Great question! Let's say between 6Gbps and 8Gbps dirty. > >> > >> As someone making a living as a DDoS mitigation engineer for the > >> last 10 years (min

Re: Recommended DDoS mitigation appliance?

it to handle? Great question! Let's say between 6Gbps and 8Gbps dirty. As someone making a living as a DDoS mitigation engineer for the last 10 years (minus 1 month) I should say your threat model is sort of unusual. Potential miscreants today should be assumed to have much more to sho

Re: Recommended DDoS mitigation appliance?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dear Töma, > Potential miscreants today should be assumed to have much more to > show you even on a daily basis. Oh, indeed! :) > Is it like you also have something filtering upstream for you, > e.g. flowspec-enabled peers? That is correct. Be

Re: Recommended DDoS mitigation appliance?

Peace, On Mon, Nov 18, 2019, 5:25 AM Richard wrote: > The OP is very knowledgeable and would not mince words or waste bandwidth. > Sure, I totally assume that. I just feel I might offer a better advice once I see the big picture. -- Töma >

Re: Recommended DDoS mitigation appliance?

t; > dirty traffic are you expecting it to handle? > > Great question!  Let's say between 6Gbps and 8Gbps dirty. > > > As someone making a living as a DDoS mitigation engineer for the last > 10 years (minus 1 month) I should say your threat model is sort of > unusual.

Re: Recommended DDoS mitigation appliance?

Peace, On Mon, Nov 18, 2019, 1:49 AM Rabbi Rob Thomas wrote: > > I am going to assume you want it to spit out 10G clean, what size > > dirty traffic are you expecting it to handle? > > Great question! Let's say between 6Gbps and 8Gbps dirty. > As someone making a l

Re: Recommended DDoS mitigation appliance?

pm, Rabbi Rob Thomas > wrote: > > > > Hello, NANOG! > > I'm in the midst of rebuilding/upgrading our backbone and peering > - sessions cheerfully accepted :) - and am curious what folks > recommend in the DDoS mitigation appliance realm? Ideally it would &

Re: Recommended DDoS mitigation appliance?

f rebuilding/upgrading our backbone and peering - > sessions cheerfully accepted :) - and am curious what folks recommend > in the DDoS mitigation appliance realm? Ideally it would be capable > of 10Gbps and circa 14Mpps rate of mitigation. If you have a > recommendation, I'd lov

Recommended DDoS mitigation appliance?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello, NANOG! I'm in the midst of rebuilding/upgrading our backbone and peering - sessions cheerfully accepted :) - and am curious what folks recommend in the DDoS mitigation appliance realm? Ideally it would be capable of 10Gbps and circa 1

NIST looking for comments on "Secure Interdomain Traffic Exchange – BGP Robustness and DDoS Mitigation: NIST Releases Draft NIST SP 800-189"

Hey all, NIST is looking for comments on "Secure Interdomain Traffic Exchange – BGP Robustness and DDoS Mitigation: NIST Releases Draft NIST SP 800-189" They recently extended the deadline for comments to March 15, 2019, and so it looks like they would really like feedback -

Re: DDoS Mitigation

sprint i think still does) and move your links there. > > All of those are cheaper when under attack than the off-netork > solutions (generally). > > On Thu, Nov 5, 2015 at 9:12 AM, Tin, James wrote: >> This is my first post to Nanog. So please don't flame me down ;) >>

Re: DDoS Mitigation

o please don't flame me down ;) > > Hi Mario. > > Typically the cost of Ddos mitigation is charged on the amount of clean > traffic inbound to your network, the number of protected /24 ranges you need > protected and the number of datacentres you want to protect. > &g

Re: DDoS Mitigation

This is my first post to Nanog. So please don't flame me down ;) Hi Mario. Typically the cost of Ddos mitigation is charged on the amount of clean traffic inbound to your network, the number of protected /24 ranges you need protected and the number of datacentres you want to protect. Id

Re: DDoS Mitigation

Depends on the service, you might have better luck with versign or prolexic and they can get the services up and running quickly. Joe Jenkins 909.636.2097 > On Nov 4, 2015, at 9:33 AM, Mario Eirea wrote: > > Hello everyone, > > Looking to find out how the pricing model

Re: DDoS Mitigation

Hey, Just blocking port 19 won't cut it, as we often see Chargen attacks that run on nonstandard ports as well Thanks, Paras On 11/4/2015 12:33 PM, Mario Eirea wrote: Hello everyone, Looking to find out how the pricing model works for DDoS mitigation and what to expect as far as bal

DDoS Mitigation

Hello everyone, Looking to find out how the pricing model works for DDoS mitigation and what to expect as far as ballpark pricing from my ISP. Some background, we are getting hit with a chargen attack that comes and goes and is saturating our 500mb connection. Tried hitting up the ISP for UDP

Re: DDoS mitigation for ISPs

Hello! Could recommend folks from EU - http://qrator.net/en/ Two years without any issues. Perfect SSL and http filtration. On Thu, Oct 29, 2015 at 10:53 PM, Hugo Slabbert wrote: >>> Alternatively: http://lmgtfy.com/?q=ddos+protection >>> >> Actually I did the google thing first and followed up

Re: DDoS mitigation for ISPs

Alternatively: http://lmgtfy.com/?q=ddos+protection Actually I did the google thing first and followed up with several of the top results, and not once did I see anyone offering a bgp tunnel + scrub which is why I asked. I did get some good off list responses however, thanks all. Mike- Ap

Re: DDoS mitigation for ISPs

On 10/29/2015 08:54 AM, Hugo Slabbert wrote: On Thu 2015-Oct-29 08:42:31 -0700, Mike wrote: Hello, Is there any DDoS mitigation service provider that can scrub traffic for an ISP network? I have an ASN and BGP and my own netblocks, and I have a 1gbps pipe. I was thinking the scenario

Re: DDoS mitigation for ISPs

On Thu 2015-Oct-29 08:42:31 -0700, Mike wrote: Hello, Is there any DDoS mitigation service provider that can scrub traffic for an ISP network? I have an ASN and BGP and my own netblocks, and I have a 1gbps pipe. I was thinking the scenario would be during attack, we could bring up a

Re: DDoS mitigation for ISPs

On Thu, Oct 29, 2015 at 08:42:31AM -0700, Mike wrote: > Is there any DDoS mitigation service provider that can scrub traffic > for an ISP network? Yeah, plenty. A non-exhaustive list: Prolexic, Incapsula, Staminus or Nexusguard. There is no lack of choice. > I have an ASN and BGP a

DDoS mitigation for ISPs

Hello, Is there any DDoS mitigation service provider that can scrub traffic for an ISP network? I have an ASN and BGP and my own netblocks, and I have a 1gbps pipe. I was thinking the scenario would be during attack, we could bring up a tunnel and run bgp over it and advertise some

Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

t; use it in case you screw up and it contains leaks ;) >> > > >> > > Oorspronkelijk bericht >> > > Van: Pavel Odintsov > >> > >> > > Datum: >> > > Aan: Jim Popovitch > > >> > > Cc: nanog@nanog.org

Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

security tool. So ppl using it want to publicly hide the fact >> > > they >> > > use it in case you screw up and it contains leaks ;) >> > > >> > > Oorspronkelijk bericht >> > > Van: Pavel Odintsov > >> > > D

Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

up and it contains leaks ;) > > > > > > Oorspronkelijk bericht > > > Van: Pavel Odintsov > > > > Datum: > > > Aan: Jim Popovitch > > > > Cc: nanog@nanog.org > > > Onderwerp: Re: FastNetMon 1.1.2 - open source solution f

Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

gt; Cc: nanog@nanog.org > > Onderwerp: Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS > > mitigation > > > > Looks like many folks want hide company emails ;) I'm good guy and will > not > > spam or offer slmething ;))) > > > > But I'

Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

> Datum: > Aan: Jim Popovitch > Cc: nanog@nanog.org > Onderwerp: Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS > mitigation > > Looks like many folks want hide company emails ;) I'm good guy and will not > spam or offer slmething ;))) > > But I

Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

ution for DoS/DDoS mitigation Looks like many folks want hide company emails ;) I'm good guy and will not spam or offer slmething ;))) But I'm impressed about amount of off list requests. Really huge interest in tool. On Thursday, June 4, 2015, Jim Popovitch wrote: > There's

Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

Looks like many folks want hide company emails ;) I'm good guy and will not spam or offer slmething ;))) But I'm impressed about amount of off list requests. Really huge interest in tool. On Thursday, June 4, 2015, Jim Popovitch wrote: > There's a surprising amount of GMail (yes, including me)

Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

There's a surprising amount of GMail (yes, including me) and new-ness in this thread.Should I be impressed with the freshness or concerned about astroturfing? :-) Bah Humbug! -Jim P.

Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

Dear Pavel , This is definitely interesting project . I already tested the previous version but due to some feature limitation i could not continue but i think this new version added very important features . Definitely I will trail the new version soon . On Wed, Jun 3, 2015 at 2:16 AM, Pavel

Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

Yep, definitely i'll give this a trial run. We are developing nullroute application internally. I'll try to run this in our lab. On Wed, Jun 3, 2015 at 3:16 AM, Pavel Odintsov wrote: > Hello, Nanog! > > I'm very pleased to present my open source DoS/DDoS attack monitoring > toolkit here! > > We h

Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

Hello! Thank you! Please share your experience after tests! On Wed, Jun 3, 2015 at 5:50 PM, Budiwijaya wrote: > Yep, definitely i'll give this a trial run. > We are developing nullroute application internally. > I'll try to run this in our lab. > > On Wed, Jun 3, 2015 at 3:16 AM, Pavel Odintsov

Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

Interesting project, Pavel. I'll most certainly give this a trial run. On Tue, Jun 2, 2015 at 10:16 PM, Pavel Odintsov wrote: > Hello, Nanog! > > I'm very pleased to present my open source DoS/DDoS attack monitoring > toolkit here! > > We have spent about 10 months for development of FastNetMon

Re: FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

Thank you for interest! Feel free to ask me about anything! Feature requests very appreciate! On Wed, Jun 3, 2015 at 9:31 AM, Johan Kooijman wrote: > Interesting project, Pavel. I'll most certainly give this a trial run. > > On Tue, Jun 2, 2015 at 10:16 PM, Pavel Odintsov > wrote: >> >> Hello, N

FastNetMon 1.1.2 - open source solution for DoS/DDoS mitigation

Hello, Nanog! I'm very pleased to present my open source DoS/DDoS attack monitoring toolkit here! We have spent about 10 months for development of FastNetMon and could present huge feature list now! :) Stop! What is FastNetMon? It's really very fast toolkit which could find attacked host in you

RE: DDoS mitigation Equinix?

4:26 PM To: Christopher Morrow Cc: nanog@nanog.org Subject: Re: DDoS mitigation Equinix? I actually use GigeNET at the moment for DDoS protection and they're terrible. Their trigger detection is terrible at picking up attacks and my attack is barely ever mitigated because of it. On S

Re: DDoS mitigation Equinix?

s versus an individual domain, it's just a different > business model going after different market segments. > >>> > >>> > >>> > >>> Sent from my iPhone > >>> > >>>> On Jul 19, 2014, at 2:44 AM, Abuse Contact < &

Re: DDoS mitigation Equinix?

sus an individual domain, it's just a different >>> business model going after different market segments. >>> >>> >>> >>> Sent from my iPhone >>> >>>> On Jul 19, 2014, at 2:44 AM, Abuse Contact >>>> wrote: >>&

Re: DDoS mitigation Equinix?

d protection >> against entire networks versus an individual domain, it's just a different >> business model going after different market segments. >> >> >> >> Sent from my iPhone >> >>> On Jul 19, 2014, at 2:44 AM, Abuse Contact >>

Re: DDoS mitigation Equinix?

protection against > entire networks versus an individual domain, it's just a different business > model going after different market segments. > > > > Sent from my iPhone > >> On Jul 19, 2014, at 2:44 AM, Abuse Contact >> wrote: >> >> Hi, >>

Re: DDoS mitigation Equinix?

it's DDoS protection benefits like large companies such as CloudFlare use them for DDoS mitigation, I don't get it, how do they help with DDoS protection? You still get a 1Gbit from them or whatever and also do you guys know around how much they'd cost? Thanks!

Re: DDoS mitigation Equinix?

ent business model going after different market segments. Sent from my iPhone On Jul 19, 2014, at 2:44 AM, Abuse Contact wrote: Hi, I've heard that using Equinix has it's DDoS protection benefits like large companies such as CloudFlare use them for DDoS mitigation, I don't get i

Re: DDoS mitigation Equinix?

quinix has it's DDoS protection benefits like large > companies such as CloudFlare use them for DDoS mitigation, I don't get it, > how do they help with DDoS protection? You still get a 1Gbit from them or > whatever and also do you guys know around how much they'd cost? &g

Re: DDoS mitigation Equinix?

actly EQX' solution is engineered is a question best left for their > sales engineers or similar people to answer, though. > > > On 7/19/2014 午後 04:44, Abuse Contact wrote: >> >> Hi, >> I've heard that using Equinix has it's DDoS protection benefits like la

Re: DDoS mitigation Equinix?

:44, Abuse Contact wrote: Hi, I've heard that using Equinix has it's DDoS protection benefits like large companies such as CloudFlare use them for DDoS mitigation, I don't get it, how do they help with DDoS protection? You still get a 1Gbit from them or whatever and also do you guys kn

DDoS mitigation Equinix?

Hi, I've heard that using Equinix has it's DDoS protection benefits like large companies such as CloudFlare use them for DDoS mitigation, I don't get it, how do they help with DDoS protection? You still get a 1Gbit from them or whatever and also do you guys know around how m

Re: Ddos mitigation service

At 11:06 01/02/2013 -0500, Patrick W. Gilmore wrote: On Feb 01, 2013, at 10:02 , "Paul Stewart" wrote: > Akamai (CDN) does scrubbing??? I'm sure there are other things Akamai does in the security sector as well. And now Juniper is p

Re: Ddos mitigation service

> From my personal experience, I am a fan of pure-play DDoS mitigation service > providers (e.g. Prolexic, Dosarrest) because they are the least likely to > give up on you when things get real difficult. Read the SLA careful to make > sure it is fit for your purpose. > > -

RE: Ddos mitigation service

>From my personal experience, I am a fan of pure-play DDoS mitigation service providers (e.g. Prolexic, Dosarrest) because they are the least likely to give up on you when things get real difficult. Read the SLA careful to make sure it is fit for your purpose. -Original Message- F

Re: Ddos mitigation service

IRC, CloudFlare claims to the same capcity of DDOS mitigation as Prolexic (500gb) and also has a free option with fewer scrubbing features. Do you have experience with it, or is there some other reason to have excluded it from your list? I apologize for my noobish question. Cheers, James

Re: Ddos mitigation service

ge- > From: Pierre Lamy [mailto:pie...@userid.org] > Sent: February-01-13 9:58 AM > To: matt kelly > Cc: nanog@nanog.org > Subject: Re: Ddos mitigation service > > The 3 major scrubbing vendors: > > Prolexic > Verisign > Akamai > > > > >

Re: Ddos mitigation service

Hi Pierre, Thank you for your interesting note. On 01/02/2013 09:57, Pierre Lamy wrote: > The 3 major scrubbing vendors: > > Prolexic > Verisign > Akamai IIRC, CloudFlare claims to the same capcity of DDOS mitigation as Prolexic (500gb) and also has a free option with fewer scr

RE: Ddos mitigation service

Akamai (CDN) does scrubbing??? Paul -Original Message- From: Pierre Lamy [mailto:pie...@userid.org] Sent: February-01-13 9:58 AM To: matt kelly Cc: nanog@nanog.org Subject: Re: Ddos mitigation service The 3 major scrubbing vendors: Prolexic Verisign Akamai

  1   2   >