strategies to mitigate DNS amplification attacks in ISP network

Stepan Kucherenko twh at
Wed Dec 2 08:33:01 UTC 2015

> flowspec.

Probably the best method if you have competent engineers and uplinks who 
can give you bgp flowspec.

Makes bandwitdh attacks amusing instead of annoying.

More information about the NANOG mailing list