3 ms·
Yeah, that's basically what their NOC told me, although they didn't really have much of an explanation into why they were nullrouting /24 subnets when Digitaloc
by jameshilliard 7y ago
Yeah, that's basically what their NOC told me, although they didn't really have much of an explanation into why they were nullrouting /24 subnets when Digitalocean typically allocates single addresses.
- marcinzm 7y agoWouldn't malware simply spin up a new VM with a new IP to trivially get around single IP blocks? Wouldn't such blocks also put a lot of strain on the NOC to maintain.
- jameshilliard 7y agoWell since they seem to just block entire /24 subnets it does seem to have resulted in a large portion of Digitalocean's network being unusable from Viasat. I guess they think it's worth it to maintain those blacklists.
- metildaa 7y agoIts not hard for them to maintain blacklists, especially since they do not care about network quality. If I were in your position, I would set up a proxy that appears as http traffic (so you fly under their radar).