3 ms·
> namely BGP DDoS attacks would still occur if we used a routing protocol other than BGP. It's not created by BGP, it's created by the fact that the Internet
by greyface- 4y ago
> namely BGP
DDoS attacks would still occur if we used a routing protocol other than BGP. It's not created by BGP, it's created by the fact that the Internet is end-to-end oversubscribed.
- cowtools 4y agoThe weakness in the internet that allows for DDoS is that you can't tell your peers to filter incoming traffic on your behalf, so you need to discriminate on the edge. The attacker still gets to eat up your bandwidth and CPU time.
- greyface- 4y agoBGP absolutely does allow you to tell your peers to filter traffic before passing it to you. https://www.rfc-editor.org/rfc/rfc7999.html https://www.rfc-editor.org/rfc/rfc7999.html
- cowtools 4y agoThis is just IP-based filtering, which is useless as the attacker can purchase more IP space. What you need is something like a whitelist-by-public-key or hashcash or something.