DDoS mitigation recommendations

Fri Jan 29 02:22:16 UTC 2010

> -----Original Message-----
> From: Christopher Morrow [mailto:morrowc.lists at gmail.com]
> Sent: Thursday, January 28, 2010 11:56 AM
> To: Jeffrey Lyon
> Cc: nanog at nanog.org
> Subject: Re: DDoS mitigation recommendations
> 
> On Thu, Jan 28, 2010 at 10:00 AM, Jeffrey Lyon
> <jeffrey.lyon at blacklotus.net> wrote:
> > IntruGuard is highly customizable both from the GUI and CLI with the
> > engineer's assistance. Its the highest performance, reasonably priced
> box
> > that we've tried so far.
> 
> 'highest performance' == 100mbps on a 1gbps copper interface? or
> sessions setup/second? or remote-addresses tracked? or ?

sessions setup/second = ddos mitigation fail ;)

Stefan Fouant, CISSP, JNCIE-M/T
www.shortestpathfirst.net
GPG Key ID: 0xB5E3803D