D/DoS mitigation hardware/software needed.

Hank Nussbacher hank at efes.iucc.ac.il
Tue Jan 5 06:02:05 UTC 2010


On Tue, 5 Jan 2010, Stefan Fouant wrote:

> Almost all of the scalable DDoS mitigation architectures deployed in
> carriers or other large enterprises employ the use of an offramp method.
> These devices perform a lot better when you can forward just the subset of
> the traffic through as opposed to all.  It just a simple matter of using
> static routing / RTBH techniques / etc. to automate the offramp.

That said, what are all those ISPs doing now that Cisco has stopped 
developing the Guard?

-Hank




More information about the NANOG mailing list