<div dir="ltr">It is spoofing, but it is also absolutely amplification. Look at the preso that Damien linked : <a href="https://www.usenix.org/conference/woot14/workshop-program/presentation/kuhrer" target="_blank">https://www.usenix.org/conference/woot14/workshop-program/presentation/kuhrer</a><div><br></div><div>Hope that this doesn't become one of the 'services' that you provide! :) </div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Feb 20, 2020 at 6:40 PM Jean | <a href="http://ddostest.me">ddostest.me</a> via NANOG <<a href="mailto:nanog@nanog.org">nanog@nanog.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF">
    <p>It doesn't sound to be a real amplification.. If it is, can
      anyone provide the amplification factor? 1x?</p>
    <p>It sounds more like a TCP spoofing.</p>
    <p>Jean<br>
    </p>
    <div>On 2020-02-20 18:22, Töma Gavrichenkov
      wrote:<br>
    </div>
    <blockquote type="cite">
      
      <div dir="auto">Peace,<br>
        <br>
        <div class="gmail_quote" dir="auto">
          <div dir="ltr" class="gmail_attr">On Fri, Feb 21, 2020, 1:57
            AM Filip Hruska <<a href="mailto:fhr@fhrnet.eu" target="_blank">fhr@fhrnet.eu</a>> wrote:</div>
          <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
            <div>
              <p>[..] OVH has been offering DDOS protection capable of
                soaking up hundreds of gigabits+ per second as a
                standard with all their services for a long time</p>
            </div>
          </blockquote>
        </div>
        <div dir="auto">They only do it for common trivial vectors like
          UDP-based amplification — and other types easily handleable
          through flowspec.</div>
        <div dir="auto"><br>
        </div>
        <div dir="auto">Which is honestly not their fault because they
          try to keep their costs down.  (Other means to keep the costs
          down may be of concern of Ronald G. though, but that's a
          different story.)</div>
        <div dir="auto"><br>
        </div>
        <div dir="auto">However, TCP amplification is not of that sort.</div>
        <div dir="auto"><br>
        </div>
        <div dir="auto">--</div>
        <div dir="auto">Töma</div>
        <div class="gmail_quote" dir="auto">
          <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
            <div>
              <blockquote type="cite">
                <div dir="auto"> </div>
              </blockquote>
            </div>
          </blockquote>
        </div>
      </div>
    </blockquote>
  </div>

</blockquote></div>