Solutions for DoS & DDoS

Thu Dec 6 20:53:07 UTC 2012

The ideal solution is a carrier that has its own true DDoS mitigation platform, and does not rely on black hole routing . Have the carrier handle the the large bulk flood attacks, then have your own prem base mitigation platform take care of the more application specific attacks that get through .

This represents the best solution , and also the most expensive . So it may not work for a non profit. 

This Email was sent from Steve's iPad
> Message: 4
> Date: Thu, 6 Dec 2012 09:51:21 -0800
> From: Mike Gatti <ekim.ittag at gmail.com>
> To: NANOG list <nanog at nanog.org>
> Subject: Solutions for DoS & DDoS
> Message-ID: <0D89D80C-D288-402F-8723-B837EA52313C at gmail.com>
> Content-Type: text/plain; charset=us-ascii
> 
> Hello Everyone, 
> 
> I'm assisting a non-profit organization to research solutions to secure their network from DOS/DDOS attacks. So far we have gone the route of discussing with their ISP's to see what solutions they have to offer, believing that the carriers are better positioned to block the attack from the source. 
> 
> I wanted to get the lists thoughts on our approach going the carrier route and/or hear about successful implementation of other solutions. 
> 
> Thanks,
> --
> Michael Gatti  
> 949.371.5474
> (UTC -8)
> 
> 
> 
> 
> 
> 
> ------------------------------
> 
> 
> End of NANOG Digest, Vol 59, Issue 24
> *************************************