nanog mailing list archives
Re: Arbor Networks DoS defense product
From: Pete Kruckenberg <pete () kruckenberg com>
Date: Wed, 15 May 2002 00:14:35 -0600 (MDT)
On Wed, 15 May 2002, Rubens Kuhl Jr. wrote:
If and when (a) customers don't get exemption for attack traffic (b) the DoS traffic occurs more than 5% (or 1 - your percentile level) of the month per customer circuit (c) the DoS increases bytes transferred like large ICMP packet flood; this is not the case for all DoS traffic, which can be a bunch of small packets that actually decreases traffic
These might apply to noticeable DoS attacks that occur as specific events. But how much (D)DoS traffic goes unnoticed by the average customer because it's too tough to detect or defend against? The 10% I've measured on my network is primarily reflected DDoS (reflected off my customers, to off-net targets), which is not trivial to detect or defend against. Pete.
Current thread:
- Arbor Networks DoS defense product Sean Donelan (May 14)
- Re: Arbor Networks DoS defense product Pete Kruckenberg (May 14)
- Re: Arbor Networks DoS defense product Rubens Kuhl Jr. (May 14)
- Re: Arbor Networks DoS defense product Pete Kruckenberg (May 14)
- Re: Arbor Networks DoS defense product Richard A Steenbergen (May 15)
- Re: Arbor Networks DoS defense product Pete Kruckenberg (May 15)
- Re: Arbor Networks DoS defense product Rob Thomas (May 15)
- Re: Arbor Networks DoS defense product Dan Hollis (May 15)
- Re: Arbor Networks DoS defense product Rob Thomas (May 15)
- Re: Arbor Networks DoS defense product Dan Hollis (May 15)
- Re: Arbor Networks DoS defense product Rob Thomas (May 15)
- Re: Arbor Networks DoS defense product Dan Hollis (May 15)
- Re: Arbor Networks DoS defense product Rafi Sadowsky (May 15)
- Re: Arbor Networks DoS defense product Rubens Kuhl Jr. (May 14)
- Re: Arbor Networks DoS defense product Pete Kruckenberg (May 14)
- Re: Arbor Networks DoS defense product Rob Thomas (May 15)