On 14/02/2014 11:54, Giles Davis wrote: > Keith Mitchell wrote: >> Universal BCP38 source address validation is needed more badly then ever :-( >> > It really is.
It really is, but bear in mind that a single 1GE connection with no urpf can be used to create ~250-300G of backscatter traffic. This means that there's only a requirement to have a single unscrupulous or incompetent ISP with GE in the world to allow a devastating DoS to be launched against anyone anywhere. Nick
