Re: DDoS auto-mitigation best practices (for eyeball networks)

2015-09-22 Thread Chase Christian
t; > Frank > > -Original Message- > From: Mehmet Akcin [mailto:meh...@akcin.net] > Sent: Saturday, September 19, 2015 3:10 PM > To: Frank Bulk > Cc: nanog@nanog.org > Subject: Re: DDoS auto-mitigation best practices (for eyeball networks) > > How does he/she become

RE: DDoS auto-mitigation best practices (for eyeball networks)

2015-09-21 Thread frnkblk
- From: Mehmet Akcin [mailto:meh...@akcin.net] Sent: Saturday, September 19, 2015 3:10 PM To: Frank Bulk Cc: nanog@nanog.org Subject: Re: DDoS auto-mitigation best practices (for eyeball networks) How does he/she become target? How does IP address gets exposed? I guess simplest way is to

Re: DDoS auto-mitigation best practices (for eyeball networks)

2015-09-20 Thread alvin nanog
On 09/19/15 at 02:54pm, Frank Bulk wrote: > Could the community share some DDoS auto-mitigation best practices for > eyeball networks, where the target is a residential broadband subscriber? o kie dough kie > I'm not asking so much about the customer communication as much as > configuration of an

Re: DDoS auto-mitigation best practices (for eyeball networks)

2015-09-19 Thread Roland Dobbins
On 20 Sep 2015, at 2:54, Frank Bulk wrote: - minimum traffic volume before responding (for volumetric attacks) - minimum time to wait before responding These are situationally-specific. - filter percentage: 100% of the traffic toward target (or if volumetric, just a certain percentage)?

Re: DDoS auto-mitigation best practices (for eyeball networks)

2015-09-19 Thread Randy via NANOG
- Original Message - From: Frank Bulk To: nanog@nanog.org Cc: Sent: Saturday, September 19, 2015 12:54 PM Subject: DDoS auto-mitigation best practices (for eyeball networks) Could the community share some DDoS auto-mitigation best practices for eyeball networks, where the target is a re

Re: DDoS auto-mitigation best practices (for eyeball networks)

2015-09-19 Thread Patrick Muldoon via NANOG
> On Sep 19, 2015, at 4:09 PM, Mehmet Akcin wrote: > > How does he/she become target? How does IP address gets exposed? Call of Duty. No I am not kidding. The majority of the DDOS attacks we see targeted at Residential customers, are because said Customer was running their mouth / being an A

Re: DDoS auto-mitigation best practices (for eyeball networks)

2015-09-19 Thread Mike Hammett
nk Bulk" Cc: nanog@nanog.org Sent: Saturday, September 19, 2015 3:09:47 PM Subject: Re: DDoS auto-mitigation best practices (for eyeball networks) How does he/she become target? How does IP address gets exposed? I guess simplest way is to reboot modem and hope to get new ip (or call n reques

Re: DDoS auto-mitigation best practices (for eyeball networks)

2015-09-19 Thread Mehmet Akcin
How does he/she become target? How does IP address gets exposed? I guess simplest way is to reboot modem and hope to get new ip (or call n request) Mehmet > On Sep 19, 2015, at 12:54, Frank Bulk wrote: > > Could the community share some DDoS auto-mitigation best practices for > eyeball netwo