Re: automatic rtbh trigger using flow data

["Roland Dobbins" <rdobbins () arbor net>]

On 1 Sep 2018, at 1:20, Lotia, Pratik M wrote:

> Arbor report mentions volumetric attacks using DNS, NTP form 75+% of 
> the attacks.

I'm well aware of what's mentioned in the Arbor report, thanks!

;>

> Then QoSing certain ports and protocols is the best way to start with.

The point is that when applying broad policies of this nature, one must 
be very conservative, else one can cause larger problems on a macro 
scale.  Internet ateriosclerosis is a significant issue.

-----------------------------------
Roland Dobbins <rdobbins () arbor net>