nanog mailing list archives

Re: Pros and Cons of Cloud Computing in dealing with DDoS


From: Paul Ferguson <fergdawgster () gmail com>
Date: Thu, 5 Nov 2009 17:25:31 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, Nov 5, 2009 at 4:46 PM, Stefan Fouant
<sfouant () shortestpathfirst com> wrote:


Actually, no - the miscreants are always going to have more bandwidth
at their disposal, plus they utilize attack vectors which provide a
great deal of amplification (including at layer-7) which make
bandwidth largely irrelevant.

So if I'm hearing you correctly, you're saying that no matter how much
infrastructure you have to potentially absorb the problem, there is
nothing you can do because the bad guys are always going to have more
bandwidth at their disposal.  Man, that's a pretty bad position to be in
for a vendor who's fundamental premise is to sell boxes to deal with
these sorts of
problems. ;)

Well, the fact of the matter is that you can't put 10 lb. of [expletive]
in a 5 lb. bag, so to speak. :-)

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.3 (Build 5003)

wj8DBQFK83sEq1pz9mNUZTMRAnvkAJ9XcDIi7XTE32nMtwJfwCflq6hcdgCfXmPT
OkqNIuL8OH+BN6S4UxlfdSc=
=kqaC
-----END PGP SIGNATURE-----



-- 
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawgster(at)gmail.com
 ferg's tech blog: http://fergdawg.blogspot.com/


Current thread: