>What can we do? We can detect hosts in our networks sending or receiving large volumes of packets/bytes/flows per second. We can call an external script to not

>What can we do? We can detect hosts in our networks sending or receiving large volumes of packets/bytes/flows per second. We can call an external script to notify you, switch off a server, or blackhole the client. Watch out when implementing this stuff, it goes wrong way too often. At this point I have hard time not literally screaming at DC techs when my servers get suspended for "UDP flooding"[1] each other. [1] Otherwise known as OpenVPN