nanog mailing list archives

Re: strategies to mitigate DNS amplification attacks in ISP network

From: Stepan Kucherenko <twh () megagroup ru>
Date: Wed, 2 Dec 2015 11:33:01 +0300


flowspec.

Probably the best method if you have competent engineers and uplinks whocan give you bgp flowspec.


Makes bandwitdh attacks amusing instead of annoying.

Current thread:

strategies to mitigate DNS amplification attacks in ISP network Martin T (Dec 01)
- Re: strategies to mitigate DNS amplification attacks in ISP network Roland Dobbins (Dec 01)
  - Re: strategies to mitigate DNS amplification attacks in ISP network Roland Dobbins (Dec 01)
  - Re: strategies to mitigate DNS amplification attacks in ISP network Stepan Kucherenko (Dec 02)
- Re: strategies to mitigate DNS amplification attacks in ISP network William Herrin (Dec 01)
- RE: strategies to mitigate DNS amplification attacks in ISP network Michael Hare (Dec 01)
  - Re: strategies to mitigate DNS amplification attacks in ISP network Mark Andrews (Dec 01)
- Re: strategies to mitigate DNS amplification attacks in ISP network Karsten Elfenbein (Dec 02)