Arnold,
Joining with what Pascal says, yes, you can wash traffic when you have some Mbps, not if you have
1Gbps.. (this fill anyway your links before the washing machine which, I suppose, is somewhere
central located if you have many border routers).
And yes, we have blackholing communities
On 04.08.2004 12:04 Michele Marazza wrote:
Arnold,
Joining with what Pascal says, yes, you can wash traffic when you
have some Mbps, not if you have 1Gbps..
you can also wash traffic if it's 1Gbps.
Arnold
___
swinog mailing list
[EMAIL
Hi,
* Michele Marazza wrote:
Joining with what Pascal says, yes, you can wash traffic when you
have some Mbps, not if you have 1Gbps.. (this fill anyway your links
before the washing machine which, I suppose, is somewhere central
located if you have many border routers). And yes, we have
Michele Marazza wrote:
Joining with what Pascal says, yes, you can wash traffic when you have
some Mbps, not if you have 1Gbps.. (this fill anyway your links before
the washing machine which, I suppose, is somewhere central located if
you have many border routers).
Well, it depends on the
As far as i know Easynet France is using such solutions .. We should
implement this next year too.
Cu,
Nico
On 04.08.2004 12:33 Neil J. McRae wrote:
agree with Arnold, and we've done close to 1G on
our anti DDOS platform here. To do it on a big network
does require money, time and effort but
Hello,
No but i was thinking that you do the ACL by yourself instead of doing
it automaticly .. Since it can append at any times it's nice to wake up
at 3.00 am because of kiddies. And yes Arbor is a detection tool which
is applying ACL's or other rules to the attacked node ... Btw with any
Michaele,
On 03.08.2004 15:41 Michele Marazza wrote:
Arnold, Nico,
Let suppose to have Arbor or any other profesional anti-DDos tool and that the
tool tell me: you
have an attack of (almost) 1Gbps towards IP address x.y.z.w. What do you do now? You
still have
hundreds of Mbps coming
well ... a better solution is to redirect this traffic at the ingress
point to go thru your washing machine (e.g. Riverhead Guard) and
re-inject the washed traffic into your network.
This works fine, as long as the DoS doesnt excees the ingress bandwidth.
Above that you need other solutions,
passive interface default ?
no, I have OSPF Hellos everywhere, that's why I ask maybe a bug or even
a feature, who knows... I've opened a tac case. Just wanted to know if
anyone had something similar.. and if they could solve it.
Pascal
___
last mail had the wrong subject, sorry about that. Its about OSPF indeed.
Pascal
___
swinog mailing list
[EMAIL PROTECTED]
http://lists.init7.net/cgi-bin/mailman/listinfo/swinog
On 03.08.2004 17:17 Pascal Gloor wrote:
well ... a better solution is to redirect this traffic at the ingress
point to go thru your washing machine (e.g. Riverhead Guard) and
re-inject the washed traffic into your network.
This works fine, as long as the DoS doesnt excees the ingress
Dear Swinog,
I would like just to precise what type of problem we encountered in the evening of Friday, I will
not answer to all suggestions made by the comunity as I thing that for that, it would be nicer
discuss it behind a beer at the next Swinog meeting :-).
So, friday, there was a *HUGE*
for
that.
Cheers,
Marcel Leuenberger
Network Engineer
Bundesamt für Informatik und Telekommunikation
-Ursprüngliche Nachricht-
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Auftrag
von Nik Hug
Gesendet: Freitag, 30. Juli 2004 23:38
An: [EMAIL PROTECTED]
Betreff: Re: [swinog] AS3303 Routing
Fredy:
No comment about the Swisscom national peering policy.
Which peering policy? :-)
cheers,
michel
___
swinog mailing list
[EMAIL PROTECTED]
http://lists.init7.net/cgi-bin/mailman/listinfo/swinog
I hope the press will cover the outage and tell the audience what's
wrong with the internet in Switzerland (hint hint)
Bad things happens, when the carpet floor having their hands
on peering stuff.
Hopefully the situation with IP-Plus will change in the near future...
cheers,
michel
We see some routing troubles to AS3303 (Swisscom). Anyone else ?
Regards
Erich
--
* Erich Hohermuth IP Engineer - SolNet (AS 9044) PGPKEY-46A08FCB *
* phone: +41 32 686 82 22 / sip:[EMAIL PROTECTED] *
pgpiD4qLcuVqd.pgp
Description: signature
PROTECTED]
Cc:
Subject: [swinog] AS3303 Routing Problem ?
winmail.dat
Nik Hug wrote:
look's bad.
I can't reach admin.ch - and this two days before independent day.
Maybe we should ask for a homeland security department? - their first
task might be the deployment of a multihomed internet-link for our
tax-receivers ... but maybe this is a blind spot for a major
Nik Hug wrote:
look's bad.
I can't reach admin.ch - and this two days before independent day.
You know what? I think the DBA proxy server in the basement of the Bundeshaus
broke down!
Maybe we should ask for a homeland security department? - their first task
might be the deployment of a
From: Andre Oppermann
You know what? I think the DBA proxy server in the basement of the
Bundeshaus
broke down!
but time.ethz.ch is still up - so all LI-Servers are still in sync out there
... all emails for Rorschacher and friend are waiting nicely queued up at
provider side. Bad luck for
Fredy Kuenzler wrote:
Arnold Nipper wrote:
On 30.07.2004 23:51 Fredy Kuenzler wrote:
And this on sysadmin's day. What a nightmare. Tell all complaining
maybe s/on/because/ ;-) ... too much glck, glck, glck
Don't think so. Maybe the AS3303 sysadmins did not get any appreciation,
so
At least they confirm it now.
http://www.ip-plus.net/network/current_problems_set.en.html
confirmed once working again ;-)
we want pering!!! ;-P
Have a nice sysadmin weekend ;)
Pascal
___
swinog mailing list
[EMAIL PROTECTED]
Andre Oppermann wrote:
sbb.ch works for me, but have a look at the traceroute ;-)
oh I didn't say it does not work ...
traceroute to www.sbb.ch (193.192.251.7), 64 hops max, 40 byte packets
1 core1.pipeline.ch (62.48.0.1)
2 sl-gw10-zur-2-0.sprintlink.net (80.93.9.13)
3
Pascal Gloor wrote:
At least they confirm it now.
http://www.ip-plus.net/network/current_problems_set.en.html
confirmed once working again ;-)
we want pering!!! ;-P
indeed.
I hope the press will cover the outage and tell the audience what's
wrong with the internet in Switzerland
24 matches
Mail list logo
