D/DoS mitigation hardware/software needed.
Jeffrey Lyon
jeffrey.lyon at blacklotus.net
Tue Jan 5 03:06:06 UTC 2010
We have such a configuration in progress, it works great without any of the
issues you're proposing.
Jeff
On Jan 4, 2010 9:09 PM, "Dobbins, Roland" <rdobbins at arbor.net> wrote:
On Jan 5, 2010, at 4:25 AM, Jeffrey Lyon wrote: > Use a robust firewall such
as a Netscreen in fro...
Absolutely not - the firewall will fall over due to state-table exhaustion
before the mitigation system will. Firewalls (which have no place in front
of servers in the first place), load-balancers, and any other stateful
devices should be southbound of the mitigation system.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>
Injustice is relatively easy to bear; what stings is justice.
-- H.L. Mencken
More information about the NANOG
mailing list