DDoS mitigation recommendations

Tue Jan 26 14:41:18 UTC 2010

There was an interesting thread on this topic a few weeks back.  I really liked the Guards, it's too bad Cisco decided to pull this from the marketplace - it was as close to a panacea as it gets.

As alternatives, I've worked with the Riorey boxes as well as Arbor gear.  They are both very good boxes, but as your requirements state that you require Multi-tenancy that only really leaves the Arbor.  Unfortunately, the Riorey boxes only support a one-size fits all approach as they do not allow unique filtering parameters on a per-prefix basis.  Arbor on the other hand supports a full range of Managed Objects and Mitigation Templates which can be applied to individual prefixes, etc.

Sorry for the top post, I'm on my Blackberry.

Stefan Fouant
------Original Message------
From: Korten, Sean
To: nanog at nanog.org
To: tsands at rackspace.com
Subject: RE: DDoS mitigation recommendations
Sent: Jan 26, 2010 9:16 AM

One more for Arbor.

-----Original Message-----
From: David Freedman [mailto:david.freedman at uk.clara.net] 
Sent: Tuesday, January 26, 2010 8:17 AM
To: nanog at nanog.org
Subject: Re: DDoS mitigation recommendations

>Arbor stuff comes to mind and works very well in our experiences....

Arbor++

This E-mail and any of its attachments may contain Time Warner
Cable proprietary information, which is privileged, confidential,
or subject to copyright belonging to Time Warner Cable. This E-mail
is intended solely for the use of the individual or entity to which
it is addressed. If you are not the intended recipient of this
E-mail, you are hereby notified that any dissemination,
distribution, copying, or action taken in relation to the contents
of and attachments to this E-mail is strictly prohibited and may be
unlawful. If you have received this E-mail in error, please notify
the sender immediately and permanently delete the original and any
copy of this E-mail and any printout.

Sent from my Verizon Wireless BlackBerry