Getting a box that's in colo DoSed is a very different thing than your singlehomed residential connection... At minimum a single server in colo will be hung off a switch that has 1 x 10GbE back to an aggregation router, and that router will probably have at least 2 x 10 Gbps links going to two different routers further upstream.
I've seen 800-900 Mbps DoSes aimed at small servers in colo that weren't even noticed because they only raised the traffic in and out of that agg switch by maybe 20%, the traffic flow went from 2.8 to 3.5 Gbps peak coming towards the switch it was hung off, temporarily up to 5 Gbps or so. On Mon, Sep 14, 2015 at 12:57 PM, Ken Hohhof <[email protected]> wrote: > If the guy is running a business and is going to send angry Twitter posts > when his Internet goes down because he’s getting DOS’d, he should at a > minimum have business service. > > But I compare it to someone like Brian Krebs who knows he’s going to get > DOS’d because of what he does and is upfront with his Internet providers > and in fact uses one that specializes in DOS mitigation. > > I was not trying to say professional gamers are bad people or anything > like that. > > I love Brian Krebs, but would not sell him an Internet connection. > > > *From:* Adam Moffett <[email protected]> > *Sent:* Monday, September 14, 2015 2:28 PM > *To:* [email protected] > *Subject:* Re: [AFMUG] AF24HD > > Agreed. > > On 9/14/2015 2:58 PM, Joshua Stump wrote: > > GET OFF MY LAWN! > > On Mon, Sep 14, 2015 at 2:49 PM, Ken Hohhof <[email protected]> wrote: > >> I hope there is a way under the Open Internet Order to deny service to >> gamers who live stream on Twitch. The term “attractive nuisance” comes to >> mind. >> >> In addition to DOS attacks, wasn’t there a rash of swatting attacks >> against Twitch players, where the SWAT team would bust into their house >> while they were streaming? >> >> >> *From:* Mark Radabaugh <[email protected]> >> *Sent:* Monday, September 14, 2015 1:40 PM >> *To:* [email protected] >> *Subject:* Re: [AFMUG] AF24HD >> >> Last week we start getting angry twitter posts from a customer but no >> matching name. >> >> About the same time a tower site goes down. Start investigating the >> outage and find >100Mbps flooding the tower from a DOS attack. Track down >> the IP/Customer it’s aimed at. Hey, wait a minute, isn’t that the guy >> complaining on twitter? Oh yeah. Claims to be a professional call of >> duty player who gets paid. Really? >> >> Mark >> >> >> On Sep 14, 2015, at 1:07 PM, Ken Hohhof <[email protected]> wrote: >> >> That competitor is in for a rude awakening, customers whose VoIP calls >> drop and Roku video freezes consider even a momentary outage or degradation >> "Unacceptable!" (to quote Beldar): >> https://www.youtube.com/watch?v=4YUE7LAFrOM >> >> This is not the Internet of a few years ago, where people didn't even >> notice short outages. >> >> >> -----Original Message----- >> From: Seth Mattinen >> Sent: Monday, September 14, 2015 11:58 AM >> To: <[email protected]>[email protected] >> Subject: Re: [AFMUG] AF24HD >> >> On 9/14/15 09:42, Ken Hohhof wrote: >> > That’s just crazy, unless you can tolerate outages whenever it rains. >> > Whatever number you use for rain fade per mile, let’s say 10 dB/mile at >> > 24 GHz, multiply by 12. No way you are going to get 120 dB fade >> > margin. The only way would be if your weather is such that it never >> > rains over more than a very small area at the same time. >> >> >> There's a competitor in my area with outages or degraded service as >> normal ops (it's a feature not a bug) and their customers largely seem >> to accept it. >> >> ~Seth >> >> >> > > > > -- > Joshua Stump > > Network Administrator | Fourway.NET | 800-733-0062 > > >
