Moin!
On 30 May 2014, at 01:36, Roland Dobbins <[email protected]> wrote:
> On May 30, 2014, at 3:30 PM, hua peng <[email protected]> wrote:
>
>> I am just curious that for a common DNS cluster how can it defend that large
>> a flood?
>
> Most attacks of that size are DNS reflection/amplification attacks, not
> query-floods:
>
> <https://app.box.com/s/r7an1moswtc7ce58f8gg>
And most are caused by open DNS proxies/resolvers. See:
https://conference.apnic.net/data/37/119-rw-dns-amplification-apricot-rw03_1393420184.pdf
not sure if there is propaganda in there, but my company paid me to research
that.
So long
-Ralf
---
Ralf Weber
Senior Infrastructure Architect
Nominum Inc.
2000 Seaport Blvd. Suite 400
Redwood City, California 94063
[email protected]
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs