DDOS solution recommendation

Job Snijders job at instituut.net
Sun Jan 11 15:07:18 UTC 2015


On Sun, Jan 11, 2015 at 09:58:12PM +0700, Roland Dobbins wrote:
>> 2. Protect yourself by having your upstream police Police UDP to some
>> baseline you are comfortable with.
> 
> This will come back to haunt you, when the programmatically-generated
> attack traffic 'crowds out' the legitimate traffic and everything
> breaks.
> 
> You can only really do this for ntp.

You can also consider adding CHARGEN and SSDP. 

Kind regards,

Job



More information about the NANOG mailing list