nanog mailing list archives

Re: Over a decade of DDOS--any progress yet?


From: Christopher Morrow <morrowc.lists () gmail com>
Date: Mon, 13 Dec 2010 10:11:13 -0500

On Mon, Dec 13, 2010 at 8:52 AM, Drew Weaver <drew.weaver () thenap com> wrote:
I'm certain there are thresholds to that. Carrier grade mitigation
solutions will start low and ramp up to 5, 6, 7, etc. figures
depending on the attack and amount of bandwidth to be filtered among
other variables.



My point was, if you "mitigate" the attack vs. null routing the target you have to pay for the transit that the 
attack consumes between your network and the upstream network(s).


so... with a carrier managed solution (or the one ATT/Sprint/VZB sold)
the transit of the attack happens inside their networks and isn't
charged to the end-customer (the destination, obviously contributing
customers get charged :) )

-chris


Current thread: