5 ms·
The capacity of networking gear isn't unidimentional - most network equipment has both a maximum number of packets per second and a maximum total throughput. I
by repiret 6y ago
The capacity of networking gear isn't unidimentional - most network equipment has both a maximum number of packets per second and a maximum total throughput. I'm not in the business, but I suspect that sophisticated network filtering equipment even at the high end can have its packets-per-second capacity eaten up before it hits line speed, just like low end routing equipment can.
As a result, there are some people whose ability to withstand a DDoS has more to do with packets per second than bits per second, so it becomes a useful metric.
- jeffbee 6y agoYes, a 1-byte UDP packet is just about as costly as a 1000-byte UDP packet. Considering that an ordinary PC can drive a 100gbps line interface with large frames, 1tbps is really nothing at all. But 1 Gpps is orders of magnitude more than one machine can normally send or receive.
- elithrar 6y ago> As a result, there are some people whose ability to withstand a DDoS has more to do with packets per second than bits per second, so it becomes a useful metric. Right, definitely. A large sports streaming event might (easily!) do 10Tbps across a country, even more, but each GB served may only represent ~5k requests - 10e3/8 * 5e3 = 6.25M RPS, with each request being a single packet (small GET requests). That's big, but workable across enough machines for a big provider. 500M Pps is 80x that figure - you're basically DoS'ing header processing filters in your networking hardware.