box against dos/ddos

Kenneth McRae kenneth.mcrae at dreamhost.com
Thu Jan 31 18:47:03 UTC 2013


I think Radware has to sit inline. I do not believe they offer BGP offramp,
so keep that in mind.

On Thu, Jan 31, 2013 at 10:39 AM, Jay Coley <j at jcoley.net> wrote:

> +1 for Radware
>
> On 31/01/2013 18:36, dennis wrote:
> > Agreed, my shortlist for evaluation would include  Arbor, Radware and
> > Genie NRM.   New players to the market include just about every IPS and
> > application load balancing solution out there.
> >
> >
> > --------------------------------------------------
> > From: "Suresh Ramasubramanian" <ops.lists at gmail.com>
> > Sent: Thursday, January 31, 2013 10:23 AM
> > To: "Piotr" <piotr.1234 at interia.pl>
> > Cc: <nanog at nanog.org>
> > Subject: Re: box against dos/ddos
> >
> >> arbor peakflow to start with?
> >>
> >> On Thursday, January 31, 2013, Piotr wrote:
> >>
> >>> Hi,
> >>>
> >>> I looking some box (vendor, model), which i can put out of the
> >>> main/product network,  which can analyze packets
> >>> netflow,sflow,syslog from
> >>> bgp router(s) and after discover some anomaly it can do some action,
> for
> >>> example:
> >>>
> >>> - Box have bgp session with bgp router and advertise attacked ip prefix
> >>> with some community. Bgp router set next-hop for this prefix to
> >>> /dev/null
> >>>
> >>> Normal traffic via bgp router is about 1G/s in and 10G/s out
> >>>
> >>> What is worth of looking and what you suggest ?
> >>>
> >>> thanks for help,
> >>> Piotr
> >>>
> >>>
> >>
> >> --
> >> --srs (iPad)
> >>
> >
> >
> >
>
>
>
>
>


More information about the NANOG mailing list