Experience on Wanguard for 'anti' DDOS solutions

marcel.duregards at yahoo.fr marcel.duregards at yahoo.fr
Wed Aug 12 04:49:02 UTC 2015


Aaron,

Do you remember which release or when it was ?
Are you talking about detection or filtering which failed for many 
sources targeting a single destination ?
Which sensor did you test, packet sensor or flow sensor ?

Thank,
Regards,
- Marcel


On 11.08.2015 17:42, Aaron wrote:
> We tested it a while back and found that it was fine for single source
> attacks but fell over with multiple sources.  Has that changed?
>
>
>
> On 8/11/2015 9:42 AM, Nick Rose wrote:
>> We have processed just under a million anomalies with this software,
>> we use the Chelsio cards for filtering. We had some troubles with
>> packet loss on the filter side until we started using those which were
>> a new feature in the latest release.
>>
>> If you have any questions I would be happy to answer them.
>>
>> Regards,
>> Nick Rose | CTO
>> Enzu Inc
>> nick.rose at enzu.com
>> www.enzu.com <http://www.enzu.com/>
>>
>>
>>
>>
>>
>>
>>
>>
>> On 8/11/15, 2:14 AM, "NANOG on behalf of marcel.duregards at yahoo.fr"
>> <nanog-bounces at nanog.org on behalf of marcel.duregards at yahoo.fr> wrote:
>>
>>> anybody from this impressive list ?:
>>>
>>> https://www.andrisoft.com/company/customers
>>>
>>> -- Marcel
>>>
>>>
>>>
>>> On 11.08.2015 03:28, Paul Ferguson wrote:
>>>> -----BEGIN PGP SIGNED MESSAGE-----
>>>> Hash: SHA256
>>>>
>>>> On 8/10/2015 6:07 PM, Valdis.Kletnieks at vt.edu wrote:
>>>>
>>>>> On Tue, 11 Aug 2015 09:36:07 +1000, Nick Pratley said:
>>>>>
>>>>>> Once setup correctly. very good product - it's been running for 8
>>>>>> months now and hasn't had any issues. It's been very reliable.
>>>>> I'll bite - (roughly) how many times has it triggered and mitigated
>>>>> an actual DDoS during those 8 months?  We probably draw different
>>>>> conclusions from "8 months and 1 DDoS" reliable and "8 months of
>>>>> 5-a-week" reliable...
>>>>>
>>>>
>>>> I think that would definitely depend on how the network is base-lined.
>>>>
>>>> That is sometimes more of an art than a science. :-)
>>>>
>>>> - - ferg
>>>>
>>>>
>>>> - --
>>>> Paul Ferguson
>>>> PGP Public Key ID: 0x54DC85B2
>>>> Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC75 54DC 85B2
>>>> -----BEGIN PGP SIGNATURE-----
>>>> Version: GnuPG v2
>>>>
>>>> iF4EAREIAAYFAlXJT7EACgkQKJasdVTchbJXoQD+Mhyy7gwtMkp+mdaEUiqvwlWe
>>>> 70mSH8n5ALmcp+qOqMoBAKo60u/ryb9IdvsclzPpoAvq+r9CtZgh+t/9YpkUIgnP
>>>> =d7d1
>>>> -----END PGP SIGNATURE-----
>>>>
>



More information about the NANOG mailing list