nanog mailing list archives

Re: DOS ATTACK ON BGP , LPTS ??


From: Peter Ehiwe <peterehiwe () gmail com>
Date: Tue, 7 Feb 2012 07:52:20 +0100

Thanks Roland,
Does anyone have a recommended value for tuning LPTS based on experience ?
Rgds
Peter

On Tue, Feb 7, 2012 at 7:45 AM, Dobbins, Roland <rdobbins () arbor net> wrote:


On Feb 7, 2012, at 1:43 PM, Peter Ehiwe wrote:

What is the attacker spoofs the correct peering address ,

In that case, work with your peer(s) to get them to deploy anti-spoofing
filters at their edges.

then iACL may not suffice , from experience is the default policer
values for LPTS enough for XR routers

Hard to say - look at CoPP/LPTS tuning.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

               The basis of optimism is sheer terror.

                         -- Oscar Wilde




-- 
Warm Regards

Peter(CCIE 23782).


Current thread: