I don't need no stinking firewall!
Dobbins, Roland
rdobbins at arbor.net
Fri Jan 8 08:28:12 UTC 2010
On Jan 8, 2010, at 3:21 PM, Arie Vayner wrote:
> Further on, if you want to really protect against a real DDoS you would most likely would have to look at a really distributed solution, where the different geographical load balancing solutions come into play.
GSLB or whatever we want to call it is extremely useful from a general availability standpoint; however, the attackers can always scale up and really distribute their already-DDoS even further (they learned about routeservers and DNS tinkering years ago).
Architecture, visibility, and control are key, as are vendor/customer/peer/upstream/opsec community relationships.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>
Injustice is relatively easy to bear; what stings is justice.
-- H.L. Mencken
More information about the NANOG
mailing list