Over a decade of DDOS--any progress yet?

Dobbins, Roland rdobbins at arbor.net
Wed Dec 8 15:40:52 UTC 2010


On Dec 8, 2010, at 10:36 PM, Thomas Mangin wrote:

> If you are a smaller network, you need the filtering to be performed by your transit provider, as your uplink will otherwise be congested.

Actually, most DDoS attacks aren't link-flooding attacks - this hasn't been true for the last ~7 years or so.

I'm not saying it doesn't happen, because it does, and sometimes quite spectacularly - but in most cases, the attackers don't have to flood the link to achieve their desired goal.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

 	       Sell your computer and buy a guitar.








More information about the NANOG mailing list