3 ms·
We need technical capability for all the tier 1/2 boys to be able to tell if packets incoming from network X are legitimate, and drop them if they are part of c
by rasz_pl 11y ago
We need technical capability for all the tier 1/2 boys to be able to tell if packets incoming from network X are legitimate, and drop them if they are part of currently ongoing attack.
Afaik fixed silicon edge routers peering tier 1/2 networks were the biggest obstacle in filtering good traffic from spoofed/botnet one. Just a year ago we had huge problems when BGP rose to >512K entries, which is an order of magnitude easier.
Did anything change since ~10 years ago? Last time I dabbled in this it was so bad even Tier3 (ISPs) werent filtering spoofed packets.
- feld 11y agoTechnical capability exists. Everyone running BGP should be implementing BCP38. http://www.bcp38.info http://www.bcp38.info