Rate of growth on IPv6 not fast enough?

Florian Weimer fw at deneb.enyo.de
Tue Apr 20 10:27:54 UTC 2010


* Bryan Fields:

> Yes, but I was showing what a great DDOS attack method it would be
> too ;)

The beauty of flow-based forwarding (with or without NAT) is that
several types of denial-of-service attacks tend to hurt close to the
packet sources, and not just close to the victim.  As far as the whole
system is concerned, this is a very, very good thing.




More information about the NANOG mailing list