I'd agree to some extent to this sentiment.
Is anyone looking at the techniques for ddos mitigation outlined in
this draft with regards to helping their enterprise customers mitigate
ddos attacks?
http://tools.ietf.org/html/draft-ietf-opsec-blackhole-urpf-04
Scott
On Dec 21, 2009, at 5:21 PM, Artur wrote:
Good design that should indeed have a good DDoS detection
appliance :D. But it is not a single box solution.
On 12/21/2009 8:05 PM, Artur wrote:
As far as I know Arbor does great stuff again's DDoS but for SP
environments, and as I did pointed out, are the only one really
capable to mitigate a DDoS attack.
For enterprise the only way to do it is with good design.
On 12/21/2009 7:15 PM, Tony Varriale wrote:
You may want to contact Arbor since they have a business model
based on what you claim doesn't exist.
tv
----- Original Message ----- From: "Artur" <[email protected]>
To: <[email protected]>
Sent: Monday, December 21, 2009 3:05 PM
Subject: Re: [c-nsp] Any good Cisco (or other vendor) appliances
for application server DDoS prevention?
Hello Drew,
Unfortunately there isn't a efficient DDoS mitigation appliance.
Simply because, to my knowledge there ins't an appliance able to
handle the huge amount of traffic sent by a DDoS attack.
Only your SP could prevent this from reaching you.
The only things you could do would be get some redundancy.
cheers
Artur
On 12/21/2009 5:39 PM, Drew Weaver wrote:
Hello,
I'm currently searching for a firewall appliance which can also
handle application server DDoS mitigation on a small scale (not
network wide).
Does anyone know of anything like this from Cisco or any other
vendor?
I'm aware of the 'huge' network wide products such as
CiscoGuard, Arbor, etc but I am looking for something smaller
scale, I just need to be able to put something in-line between
the WAN and a group of servers that will look for things like 20
hosts on the net opening 1000s requests to the same URL.. etc
Any advice is appreciated.
thanks,
-Drew
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
--
Scott Keoseyan
[email protected]
Homepage - http://www.labyrinth.org/homepages/scott
Blog - http://www.labyrinth.org/wp1
PGP Key - http://www.labyrinth.org/homepages/scott/pgp.html
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
