4 ms·
FastNetMon does not implement DOTS yet. Instead, we support API for scrubbing centres/boxes directly.
by pavel_odintsov 9y ago
FastNetMon does not implement DOTS yet. Instead, we support API for scrubbing centres/boxes directly.
- pavel_odintsov 9y agoAlso, we sent a number of ideas/suggestions to DOTS. And I do not think that our feedback was taken into consideration.
- colobolo 9y agoYou sent a slide deck that proposed throwing out all the DOTS work after that work had been underway for more than two years. https://mailarchive.ietf.org/arch/search/?email_list=dots&q=pavel&f_from=pavel+odintsov# https://mailarchive.ietf.org/arch/search/?email_list=dots&q=...
- pavel_odintsov 9y agoThis message was prepared about 14 months ago and shared privately with WG members. So, at least few persons from this WG saw it.
- colobolo 9y agoYou sat on the deck for a year?
- pavel_odintsov 9y agoProbably, we went away from the topic. Feel free to raise PR if you want to have DOTS in FastNetMon. We'll review it carefully and if it fits our design guidance we will accept it. Thanks :)
- majke 9y agoI'm genuinely interested in differences between DOTS and Fastnetmon. Can you elaborate? I presume DOTS is transport, while Fastnetmon is detection, correct?
- bogomipz 9y agoAre there some good open source scrubbing center projects you might be able to recommend? Also might you have any resources or links to how these scrubbing services are implemented, what heuristics they use etc? I understand the front end of DDOS mitigation i.e netflows, BGP communities and RTBH, and GRE tunnels to the scrubbing centers. However the details of how the scrubbing centers works is something of a mystery to me. When looking at any of the big DDOS provider's literature, the scrubbing centers are mostly just opaque boxes with little documentation on how they actually work.
- pavel_odintsov 9y agoYou could consider this thing https://github.com/luigirizzo/netmap-ipfw https://github.com/luigirizzo/netmap-ipfw
- bogomipz 9y agoThanks, unfortunately the documentation about the project is rather scant.
- pavel_odintsov 9y agoYou could read my blog post about it instead: https://translate.google.com/translate?hl=en&sl=ru&tl=en&u=https%3A%2F%2Fwww.stableit.ru%2F2015%2F03%2Flinux-netmap-ipfw.html https://translate.google.com/translate?hl=en&sl=ru&tl=en&u=h... It's in russian but Google trsnalate crashes language baarriers! :)
- bogomipz 9y agoThanks! This is helpful. I like your blog name, I'm assuming that translation is correct :)