linode was down for 12 days?
dang that article was scary
Not all of linode was down at that time (I had a vps with them that trucked along happily the entire time), but I think their web portal was done and various things were screwy
atlanta was down most of that time i think
well for long periods of time
"proactively prevent DDOS"  Being proactive against DDOS? How would that work, DDOS the DDOSers?
bcp38?
Wouldn't BCP38 "Ingress Filtering" still allow your upstream pipe to become saturated? (admittedly, the only thing I know is the name "ingress filtering")
well it makes it quicker to find who is ddos'ing
and it stops reflection attacks
the seeding of reflection attacks that is
but bcp38 is something to other end(s) of the ddos attack need to do
yeah it's thinking of it from all points of view, rather than just from the target
"ingress filtering is a technique used to ensure that incoming packets are actually from the networks from which they claim to originate." (ah)
(I was thinking "ingress filtering" was synonymous with basic firewalling)
(Not that it isn't basic firewalling, but it's specifically anti-spoofing)
Wikipedia:https://en.wikipedia.org/wiki/Ingress_filtering
Ingress filtering :: In computer networking, ingress filtering is a technique used to ensure that incoming packets are actually from the networks from which they claim to originate. This can be used as a countermeasure against a various spoofing attacks where the attacker's packets contain fake IP addresss to make it difficult to find the source of the attack. This technique is often used in the denial-of-service attack, and this is a primary...
also, if i see it correctly reflection attacks are getting out of fashion. and bcp38 doesn't stop direct attacks (e.g. from massive iot botnets)
ant: reflection is sitll quite common.
but often it spikes soon after a new way of doing reflection attacks opens up, before people plug the holes
mercutio: yeah, but it seems to me that all the big recent attacks have been iot related (and they have been bigger than any reflection attack before)
oh, big attacks maybe
but frequent attacks can come from amplification attacks
i can imagine. but those don't make it to the news ;)
up_the_irons: Good show with the shirts and mugs.
do they ship to Canada?
sjackso: :)
nathani: yes, they ship worldwide.  shipping to Canada is a little more expensive than the US.