NAP/ISP Saturation WAS: Re: Exchanges that matter...
freedman at netaxs.com
Fri Dec 20 22:04:50 UTC 1996
> > I think that there's some lack of clarity on the problem here. Anyone can
> > stream packets at ANY router and take it down. If it's not ICMP, you can
> > simply forge routing protocol packets. It's a question of simply
> > supersaturating the system. To truly deal with DoS attacks, there are
> > basically three approaches:
> Indeed. For instance SYN-flood the BGP port.
Won't work easily.
On Criscos, the queue is per peer, not per port..
More information about the NANOG