4 ms·

We've written about BCP 38 repeatedly: https://blog.cloudflare.com/understanding-and-mitigating-ntp-based-ddos-attacks/ https://blog.cloudflare.com/understandi

We've written about BCP 38 repeatedly: https://blog.cloudflare.com/understanding-and-mitigating-ntp-based-ddos-attacks/ https://blog.cloudflare.com/understanding-and-mitigating-ntp... https://blog.cloudflare.com/technical-details-behind-a-400gbps-ntp-amplification-ddos-attack/ https://blog.cloudflare.com/technical-details-behind-a-400gb... https://blog.cloudflare.com/the-ddos-that-knocked-spamhaus-offline-and-ho/ https://blog.cloudflare.com/the-ddos-that-knocked-spamhaus-o...

sargun 11y ago
uRPF is a pain to people who want to do any kind of creative TE with their network. For residential networks, I somewhat understand the value, but it makes dual homing unreasonable for anyone who doesn't have an ASN + BFP sessions. I'd argue rather than this, we need to be able take Flowspec (RFC5575), and make it more reasonable for transit.