4 ms·
The weakness in the internet that allows for DDoS is that you can't tell your peers to filter incoming traffic on your behalf, so you need to discriminate on th
by cowtools 4y ago
The weakness in the internet that allows for DDoS is that you can't tell your peers to filter incoming traffic on your behalf, so you need to discriminate on the edge. The attacker still gets to eat up your bandwidth and CPU time.
- greyface- 4y agoBGP absolutely does allow you to tell your peers to filter traffic before passing it to you. https://www.rfc-editor.org/rfc/rfc7999.html https://www.rfc-editor.org/rfc/rfc7999.html
- cowtools 4y agoThis is just IP-based filtering, which is useless as the attacker can purchase more IP space. What you need is something like a whitelist-by-public-key or hashcash or something.