Recommended DDoS mitigation appliance?

Sun Nov 17 22:48:33 UTC 2019

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Dear Ryan,

> I am going to assume you want it to spit out 10G clean, what size
> dirty traffic are you expecting it to handle?

Great question!  Let's say between 6Gbps and 8Gbps dirty.

Thank you!
Rob.

> On Nov 17 2019, at 2:18 pm, Rabbi Rob Thomas <robt at cymru.com>
> wrote:
> 
> 
> 
> Hello, NANOG!
> 
> I'm in the midst of rebuilding/upgrading our backbone and peering
> - sessions cheerfully accepted :) - and am curious what folks
> recommend in the DDoS mitigation appliance realm? Ideally it would
> be capable of 10Gbps and circa 14Mpps rate of mitigation. If you
> have a recommendation, I'd love to hear it and the reasons for it.
> If you have an alternative to an appliance that has worked well for
> you (we're a mix of Cisco and Juniper), I'm all ears.
> 
> Private responses are fine, and I'm happy to summarize back to the 
> list if there is interest.
> 
> Thank you! Rob.
> 

- -- 
Rabbi Rob Thomas                                           Team Cymru
   "It is easy to believe in freedom of speech for those with whom we
    agree." - Leo McKern
-----BEGIN PGP SIGNATURE-----
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=vQSp
-----END PGP SIGNATURE-----