Using IPv6 with prefixes shorter than a /64 on a LAN

Roland Dobbins rdobbins at arbor.net
Tue Jan 25 11:50:42 CST 2011


On Jan 26, 2011, at 12:44 AM, Jack Bates wrote:

> DDoS mitigation is handled differently. 

Concur 100%.  Also note that firewalls don't provide any sort of useful DDoS protection, marketing claims aside, so reaction tools such as S/RTBH, et. al. are required to protect stateful firewalls in front of client access LANs, and everything behind said stateful firewalls, from DDoS.

------------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

Most software today is very much like an Egyptian pyramid, with millions
of bricks piled on top of each other, with no structural integrity, but
just done by brute force and thousands of slaves.

			  -- Alan Kay





More information about the NANOG mailing list