Re: 10GE router resource

2008-03-24 Thread Mark Tinka
On Monday 24 March 2008, user user wrote: Hi everybody! Hello. Also I'd love to hear recommendatios for budget 10GE routers. The budget router would be used to hook up client networks through one 10GE interface and connect to different transit providers through two 10GE interfaces.

Looking for Clue at Earthlink

2008-03-24 Thread Rob Szarka
If someone here is from Earthlink, or knows someone who is, please get in touch with me off-list. I have a mail-related issue to resolve. (Sadly the ARIN-listed contact is not valid and mail to postmaster seems to go into the same black hole as mail to abuse.) Specifically, the issue

ARIN CAIDA IPv6 Survey Is Now Closed

2008-03-24 Thread Member Services
ARIN wishes to thank the 300+ people who completed the IPv6 survey. CAIDA will analyze the results and present them on 7 April during the ARIN XXI Public Policy Meeting in Denver. The results will be posted on the ARIN website in the IPv6 Information Center and on the IPv6 wiki at

Re: 10GE router resource

2008-03-24 Thread Kevin Oberman
From: Mark Tinka [EMAIL PROTECTED] Date: Mon, 24 Mar 2008 19:12:57 +0800 Sender: [EMAIL PROTECTED] On Monday 24 March 2008, user user wrote: Hi everybody! Hello. Also I'd love to hear recommendatios for budget 10GE routers. The budget router would be used to hook up client

Re: 10GE router resource

2008-03-24 Thread Joel Snyder
Also I'd love to hear recommendatios for budget 10GE routers. The budget router would be used to hook up client networks through one 10GE interface and connect to different transit providers through two 10GE interfaces. If you don't need BGP-ish power, David Newman just published his test

Re: 10GE router resource

2008-03-24 Thread Justin Shore
Joel Snyder wrote: Also I'd love to hear recommendatios for budget 10GE routers. The budget router would be used to hook up client networks through one 10GE interface and connect to different transit providers through two 10GE interfaces. If you don't need BGP-ish power, David

RE: rack power question

2008-03-24 Thread Barry Shein
Here's another project which has dubbed themselves teraflops from milliwatts which I believe is shipping iron. I have no first-hand experience with their products: http://www.sicortex.com/ -- -Barry Shein The World | [EMAIL PROTECTED] |

Re: Looking for Clue at Earthlink

2008-03-24 Thread Barry Shein
On March 24, 2008 at 11:19 [EMAIL PROTECTED] (Rob Szarka) wrote: If someone here is from Earthlink, or knows someone who is, please get in touch with me off-list. I have a mail-related issue to resolve. (Sadly the ARIN-listed contact is not valid and mail to postmaster seems to

Mitigating HTTP DDoS attacks?

2008-03-24 Thread Mike Lyon
Howdy all, So, i'm kind of new to this so please deal with my ignorance. But, what is common practice these days for HTTP DDoS mitigation during an attack? You can of course route every offending ip address to null0 at your border. But, if it's a botnet or trojan or something, It's coming from

Re: Looking for Clue at Earthlink

2008-03-24 Thread Rob Szarka
At 05:31 PM 3/24/2008, Barry Shein wrote: Specifically, the issue relates to the servers in 209.86.89.0/24, in case anyone here is already aware of an issue with the servers in this block and can help. Do you mean how they're pwned and just spew dictionary attacks? No, that's a problem

Re: Mitigating HTTP DDoS attacks?

2008-03-24 Thread Roland Dobbins
On Mar 25, 2008, at 5:02 AM, Mike Lyon wrote: Any input would be greatly appreciated. There are devices available today from different vendors (including Cisco, full disclosure) which are intelligent DDoS-'scrubbers' and which can deal with more sophisticated types of attacks at

Re: Mitigating HTTP DDoS attacks?

2008-03-24 Thread Tim Yocum
On Mon, Mar 24, 2008 at 5:18 PM, Roland Dobbins [EMAIL PROTECTED] wrote: There are devices available today from different vendors (including Cisco, full disclosure) which are intelligent DDoS-'scrubbers' and which can deal with more sophisticated types of attacks at layer-7, including

Re: Mitigating HTTP DDoS attacks?

2008-03-24 Thread Roland Dobbins
On Mar 25, 2008, at 6:18 AM, Tim Yocum wrote: If you're running Apache, you may also investigate mod_evasive, and in the case of exploits, mod_security. mod_evasive and mod_security are definitely recommended, good point. And a good relationship with your peers/upstreams/customers/vendors

Re: Mitigating HTTP DDoS attacks?

2008-03-24 Thread Paul Vixie
[EMAIL PROTECTED] (Mike Lyon) writes: So, i'm kind of new to this so please deal with my ignorance. :-). on the internet, everybody's new to everything since it's all changing every day. if anybody grumps at you for your ignorance, or says i can't type that into an IOS prompt then the fault

Re: Mitigating HTTP DDoS attacks?

2008-03-24 Thread Mike Lewinski
Paul Vixie wrote: i only use or recommend operating systems that have their own host based firewalls. soon that will mean pf (from openbsd but available on freebsd) pf's tables are nifty too btw :) pfsense, which is FreeBSD + pf, also has a port of snort IDS available. Provided the OP has

Re: Mitigating HTTP DDoS attacks?

2008-03-24 Thread Barney Wolff
On Mon, Mar 24, 2008 at 11:34:58PM +, Paul Vixie wrote: i only use or recommend operating systems that have their own host based firewalls. soon that will mean pf (from openbsd but available on freebsd) but right now that means ipfw. ipfw has a table construct which uses a data

RE: Mitigating HTTP DDoS attacks?

2008-03-24 Thread Frank Bulk - iNAME
There are also companies with whom you can contract for this service. It's my understanding that if you have a problem they will help you mitigate it. I'm not sure if they require some specific DDoS gear or if they are able to take advantage of their customer's gear to address the issue. In any

Re: Mitigating HTTP DDoS attacks?

2008-03-24 Thread Roland Dobbins
On Mar 25, 2008, at 8:10 AM, Frank Bulk - iNAME wrote: In any case, it's reactive. Several SPs (quite a few, actually) are offering DDoS mitigation services based upon a variety of tools and techniques, and with various pricing models. Some provide the service for their own

RE: rack power question

2008-03-24 Thread Frank Bulk - iNAME
So perhaps the question isn't so much how many kW's I can pack into a 42U rack, but for the data center designer, what's the best price point if real estate is not a significant issue. Or to say it another way, what kW density per rack will give me the lowest priced capital and operating cost

RE: rack power question

2008-03-24 Thread Justin M. Streiner
On Mon, 24 Mar 2008, Frank Bulk - iNAME wrote: So perhaps the question isn't so much how many kW's I can pack into a 42U rack, but for the data center designer, what's the best price point if real estate is not a significant issue. Or to say it another way, what kW density per rack will give

Re: Mitigating HTTP DDoS attacks?

2008-03-24 Thread Roger Marquis
Mike Lyon wrote: So, i'm kind of new to this so please deal with my ignorance. But, what is common practice these days for HTTP DDoS mitigation during an attack? You can of course route every offending ip address to null0 at your border. But, if it's a botnet or trojan or something, It's coming

Re: rack power question

2008-03-24 Thread Duane Waddle
On Mon, Mar 24, 2008 at 8:46 PM, Justin M. Streiner [EMAIL PROTECTED] wrote: While there are certainly customers out there who think along these lines, most of the enterprise customers I've run across in the past who would be in the market for data center colo would just as soon play the

Re: Mitigating HTTP DDoS attacks?

2008-03-24 Thread Rodrick Brown
On Mon, Mar 24, 2008 at 6:02 PM, Mike Lyon [EMAIL PROTECTED] wrote: Howdy all, So, i'm kind of new to this so please deal with my ignorance. But, what is common practice these days for HTTP DDoS mitigation during an attack? You can of course route every offending ip address to null0 at

Re: rack power question

2008-03-24 Thread Deepak Jain
While I enjoy hand waving as much as the next guy... reading over this thread, there are several definitions of sq ft (ft^2) here and folks are interchanging their uses whether aware of it or not. 1) sq ft = the amount of sq ft your cabinet/cage sits on. 2) sq ft = the amount of sq ft

RE: rack power question

2008-03-24 Thread Frank Bulk - iNAME
Thanks for the spelling it out in more detail. One point I failed to make was that as power consumption and heat/sq.ft increases, the cost to dissipate that heat appears to reach a cost/performance curve which then swings up dramatically. There appears to be a sweet spot where it's cheaper to