Re: DDoS auto-mitigation best practices (for eyeball networks)

- Original Message - From: Frank Bulk To: nanog@nanog.org Cc: Sent: Saturday, September 19, 2015 12:54 PM Subject: DDoS auto-mitigation best practices (for eyeball networks) Could the community share some DDoS auto-mitigation best practices for eyeball networks,

Re: DDoS auto-mitigation best practices (for eyeball networks)

On 20 Sep 2015, at 2:54, Frank Bulk wrote: - minimum traffic volume before responding (for volumetric attacks) - minimum time to wait before responding These are situationally-specific. - filter percentage: 100% of the traffic toward target (or if volumetric, just a certain percentage)?

DDoS auto-mitigation best practices (for eyeball networks)

Could the community share some DDoS auto-mitigation best practices for eyeball networks, where the target is a residential broadband subscriber? I'm not asking so much about the customer communication as much as configuration of any thresholds or settings, such as: - minimum traffic volume before

Re: DDoS auto-mitigation best practices (for eyeball networks)

Often it's an argument in some sort of online game or a poor loser. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com - Original Message - From: "Mehmet Akcin" To: "Frank Bulk"

Re: high latency on West Coast?

On 2015-09-18 14:57, andrew wrote: L3 fiber cut . Is this related to the wave of deliberate fiber cuts on the West Coast this year? -- Florin Andrei http://florin.myip.org/

Re: DDoS auto-mitigation best practices (for eyeball networks)

> On Sep 19, 2015, at 4:09 PM, Mehmet Akcin wrote: > > How does he/she become target? How does IP address gets exposed? Call of Duty. No I am not kidding. The majority of the DDOS attacks we see targeted at Residential customers, are because said Customer was running their

Re: DDoS auto-mitigation best practices (for eyeball networks)

How does he/she become target? How does IP address gets exposed? I guess simplest way is to reboot modem and hope to get new ip (or call n request) Mehmet > On Sep 19, 2015, at 12:54, Frank Bulk wrote: > > Could the community share some DDoS auto-mitigation best practices

Re: Transit Options in the UK?

Hi Gary, On 18/09/15 09:29, James Bensley wrote: > For full transit all the big carriers are in most of the major UK PoPs > (it would be handy if you mentioned the PoP name!). Just look on each > carriers website and check their PoP list. As per James, you did forget to point out where the PoP