Source address validation (was Re: UUNet Offer New Protection Against DDoS)

Sean Donelan sean at donelan.com
Sun Mar 7 03:45:43 UTC 2004


On Sat, 6 Mar 2004, Laurence F. Sheldon, Jr. wrote:
> > Would you rather ISPs spend money to
> > 	1. Deploying S-BGP?
> > 	2. Deploying uRPF?
> > 	3. Respond to incident reports?
>
> Why are we limited to that set?

You are not limited to any particular set.  However you are limited.  No
one has infinite resources.  Pick and choose the things you do, and you
will discover you still do not do everything everyone wants.

Create your own list of things to spend money on.  Was uRPF high enough
on your list before you ran out of money?  Why did you choose to spend
money on other security projets instead of uRPF, or the opposite why did
you choose to spend money on uRPF instead of other things which would have
improved security?





More information about the NANOG mailing list