Re: FastNetMon Usage in the wild

2023-10-18 Thread Dobbins, Roland via NANOG
On 18 Oct 2023, at 19:49, Adam Thompson wrote: Sightline *Insight* is the piece the sales team won't sell me, and TAC won't support me, for deployment in our private-cloud environment Insight isn’t used for first-order DDoS detection/classification/traceback/mitigation; Sightline/TMS

Re: FastNetMon Usage in the wild

2023-10-18 Thread Mirai Azayaka
gt; Dobbins, Roland via NANOG > Sent: Tuesday, October 10, 2023 9:34:21 PM > To: nanog@nanog.org > Subject: Re: FastNetMon Usage in the wild > > > On 11 Oct 2023, at 01:50, Adam Thompson wrote: > > you need to buy a moderately-expensive hardware server (they don’t let you &g

Re: FastNetMon Usage in the wild

2023-10-18 Thread Adam Thompson
lin.mb.ca> From: NANOG on behalf of Dobbins, Roland via NANOG Sent: Tuesday, October 10, 2023 9:34:21 PM To: nanog@nanog.org Subject: Re: FastNetMon Usage in the wild On 11 Oct 2023, at 01:50, Adam Thompson wrote: you need to buy a moderately-expensive har

Re: FastNetMon Usage in the wild

2023-10-10 Thread Mark Tinka
On 10/11/23 04:34, Dobbins, Roland via NANOG wrote: To clarify, Sightline has supported virtualization for many years, FYI. It does do, yes. But pricing for the software license is not too far off from if you chose to buy Netscout's own hardware. Not a major drama for me - I appreciate

Re: FastNetMon Usage in the wild

2023-10-10 Thread Dobbins, Roland via NANOG
On 11 Oct 2023, at 01:50, Adam Thompson wrote: you need to buy a moderately-expensive hardware server (they don’t let you virtualize it) To clarify, Sightline has supported virtualization for many years, FYI. I’m not aware of any anti-DDoS products at ISP scale that aren’t SFlow +

RE: FastNetMon Usage in the wild

2023-10-10 Thread Adam Thompson
We use Arbor’s Sightline in an SFlow + Flowspec topology. It… works. It needs a lot of tuning. It’s moderately expensive to deploy in this topology, unlike in-band which is holy-cow-expensive at our speeds. If you want historical/forensic data, you need to buy a moderately-expensive