automatic rtbh trigger using flow data

• Subject: automatic rtbh trigger using flow data
• From: baldur.norddahl at gmail.com (Baldur Norddahl)
• Date: Sun, 2 Sep 2018 02:18:08 +0200
• In-reply-to: <[email protected]>
• References: <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <60BB16CA-A829-4B8A-BFC2-47FAD7D105B[email protected]> <[email protected]>

fre. 31. aug. 2018 17.16 skrev Hugo Slabbert <hugo at slabnet.com>:

>
>
> I would love an upstream that accepts flowspec routes to get granular
> about
> drops and to basically push "stateless ACLs" upstream.
>
> _keeps dreaming_
>
>
>
We just need a signal to drop UDP for a prefix. The same as RTBH but only
for UDP. This would prevent all volumetric attacks without the end user
being cut off completely.

Besides from some games, VPN and VoIP, they would have an almost completely
normal internet experience. DNS would go through the ISP servers and only
be affected if the user is using a third party service.

Regards

Baldur
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20180902/7257a7ca/attachment.html>

• Follow-Ups:
  • automatic rtbh trigger using flow data
    • From: Ryan.Hamel at quadranet.com (Ryan Hamel)

• Prev by Date: TekSavvy (Canada) contact
• Next by Date: Service provider story about tracking down TCP RSTs
• Previous by thread: TekSavvy (Canada) contact
• Next by thread: automatic rtbh trigger using flow data
• Index(es):
  • Date
  • Thread