Re: IDS/DDOS prevention hardware that doesnt cost $80,000+?

[trainier () kalsec com]

Any firewall/router that supports ratelimiting should suffice for most 
DDoS mitigation tactics.  A program called snort (layer 7 content 
filtering) should take care of
most of your IDS needs as well. 



"Drew Weaver" <drew.weaver () thenap com> 
Sent by: owner-nanog () merit edu
05/25/2005 10:45 AM

To
<nanog () merit edu>
cc

Subject
IDS/DDOS prevention hardware that doesnt cost $80,000+?






            I?m wondering if there is such an animal out there? All of the 
ones I have seen are made for the multi-gigabit service provider there 
aren?t any for the smaller mid-rangers out there. Can anyone suggest 
anything that we can put in place? The attacks we?re seeing are just a 
huge influx of PPS not so much the amount of bandwidth.
 
Offlist to keep chatter low is fine with me.
 
Sorry to be a bother,
 
-D