Using IPv6 with prefixes shorter than a /64 on a LAN
Roland Dobbins
rdobbins at arbor.net
Tue Jan 25 17:50:42 UTC 2011
On Jan 26, 2011, at 12:44 AM, Jack Bates wrote:
> DDoS mitigation is handled differently.
Concur 100%. Also note that firewalls don't provide any sort of useful DDoS protection, marketing claims aside, so reaction tools such as S/RTBH, et. al. are required to protect stateful firewalls in front of client access LANs, and everything behind said stateful firewalls, from DDoS.
------------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>
Most software today is very much like an Egyptian pyramid, with millions
of bricks piled on top of each other, with no structural integrity, but
just done by brute force and thousands of slaves.
-- Alan Kay
More information about the NANOG
mailing list