4 ms·
How about solving it by social rather than technical means? By that I mean that most suggested solutions focus on limiting the traffic, the HOW. The How is we
by draugadrotten 9y ago
How about solving it by social rather than technical means? By that I mean that most suggested solutions focus on limiting the traffic, the HOW. The How is well known since many years, what is not working is WHEN.
Right now, traffic is blocked WHEN someone decides it is blocked. There is little automation for many reasons.
There are many technical proposals on the WHEN. Technical solutions include egress filtering or various types of filtering firewall devices.
A social proposal could be to form a trusted group of individuals or organizations that are allowed to publish a blacklist, which is updated and distributed across public channels such as twitter. Anyone running a router can then filter based on this blocklist. This solution would mimic the spam filters of the world but focus on routers rather than mail servers.
Edge routers makes very little difference here, and the situation is the same in the world of mail servers, where it makes a lot more impact to be filtered by outlook.com than by Jane Doe running exim in the garage.
Perhaps this type of social distributed solution is in place already and I just am unaware. Otherwise... I hope HN is well connected and makes the internet a better place.
- codedokode 9y agoMy suggestion is to allow to fight back (you can send 100 packets back for every incoming packet) - if someone DDOSes Github then they get 1 Gbps of flood and go off the network (maybe with their ISP that didn't do proper job to prevent attacks).
- landryraccoon 9y agoDoesn't this just make the problem worse? Your attacker can just spoof that the attack is coming coming from the target, and you've just amplified the attack by 100x. Now they only need to spoof 1% of the traffic they did before, because you want the network to make a possee and lynch suspected DDOSers..
- blackflame7000 9y agoWho's gonna stop you from fighting back right now realistically?