3 ms·
The previous post's point is not that QUIC can be used for reflection attacks. It is that it uses UDP, which means UDP cannot be blocked by simple ACLs. Block
by mcpherrinm 8y ago
The previous post's point is not that QUIC can be used for reflection attacks.
It is that it uses UDP, which means UDP cannot be blocked by simple ACLs. Blocking all UDP is a simple technique for avoiding other protocols that allow for reflection DDoS attacks.
I haven't got experience with how effective blocking UDP is as a mechanism for avoiding DDoS, but it does sound pretty simple and easy to deploy.