<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: arial,helvetica,sans-serif; font-size: 10pt; color: #000000'>I would like the list to know that not all targets attract such large attacks. I know many eyeball ISPs that encounter less than 10 gig attacks, which can be reasonably absorbed\mitigated. Online gamers looking to boot someone else from the game aren't generally committing >100 gigs of resources to an attack.<br><br><div><span name="x"></span><br><br>-----<br>Mike Hammett<br>Intelligent Computing Solutions<br>http://www.ics-il.com<br><br>Midwest-IX<br>http://www.midwest-ix.com<span name="x"></span><br></div><br><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Rabbi Rob Thomas" <robt@cymru.com><br><b>To: </b>nanog@nanog.org<br><b>Sent: </b>Sunday, November 17, 2019 4:18:57 PM<br><b>Subject: </b>Recommended DDoS mitigation appliance?<br><br>-----BEGIN PGP SIGNED MESSAGE-----<br>Hash: SHA256<br><br><br>Hello, NANOG!<br><br>I'm in the midst of rebuilding/upgrading our backbone and peering -<br>sessions cheerfully accepted :) - and am curious what folks recommend<br>in the DDoS mitigation appliance realm?  Ideally it would be capable<br>of 10Gbps and circa 14Mpps rate of mitigation.  If you have a<br>recommendation, I'd love to hear it and the reasons for it.  If you<br>have an alternative to an appliance that has worked well for you<br>(we're a mix of Cisco and Juniper), I'm all ears.<br><br>Private responses are fine, and I'm happy to summarize back to the<br>list if there is interest.<br><br>Thank you!<br>Rob.<br>- -- <br>Rabbi Rob Thomas                                           Team Cymru<br>   "It is easy to believe in freedom of speech for those with whom we<br>    agree." - Leo McKern<br>-----BEGIN PGP SIGNATURE-----<br><br>iQIzBAEBCAAdFiEEDcVjavXj08cL/QwdQ+hhYvqF8o0FAl3Rx08ACgkQQ+hhYvqF<br>8o0snw/8CxTOujcodNh/huMXZaUNlMNoNRz3IoPqBiAP9BZomMz9xqlpDW/qvWBF<br>xhoJ07C0O0mo5ilNjnPR308uifIBu6ylw02PshOCU06dV0afgtndxGg5AoG9npUV<br>7uCi2afWaf22dq5TwKLut8QPNNQJTRzndX88xJw9MzzoBTemxRtM7ft4H3UhJ0hv<br>oKo83FCNZQt36I+GZA9GBJeXM+o0f5h0w6fhRqARzttf6brJZdXgROyIQ7jptGuZ<br>N3Yrjk/8RM4XKMnYbtIwl8NS3c0nEGN3ndn+Bz7p2FE7QJrZKonk/o03dvr2kU0Y<br>7gUQliOOzV9EsptVGyLCVyDJSElvXTBaps0giEVZhdmEIDJPWvBc+93j1g7xbmti<br>27lT6+5qBmEN0oKJWxXgtw9/n1yX9vsc7tXlgYDoXGhIlszdB3baRao1tYEp8BBQ<br>hTGAULRfHe94tRzvOOQUQIuhzNcK1Q4E2jU6kzBB1wJsBD4zuHk+QIJLSHBmmnka<br>VNKlQ+5zP8dmSMBp6k4feqAtt3hy0Bj+34FbdQZYPutIe3VXHEjpWI3jI9vKjhtC<br>g7U/9CQIjVUl2APn1IllArpUpETBlNq7dSeJNUN/4Xh+eHglUnEn/m2kFG5mizmP<br>d0YvLEVe0/+WzDUz+y3KxDVP5tdJT1VM46FHIgeiB4KrWNGRPUo=<br>=uuel<br>-----END PGP SIGNATURE-----<br></div><br></div></body></html>