3 ms·

Nope. Need an array of counters, a big big array.

• tptacek 4y ago
  Because...
  • egberts1 4y ago
    You want people to know how to generate these slow-path DDoS, do ya? Been there, on both ends, ... within a network accelerator lab.
    • tptacek 4y ago
      I spent several years as the lead on what was at the time the most widely deployed DDOS product in the core of the Internet; I do not know what you are talking about. Could you maybe be more specific about why this particular DOS attack requires extreme statekeeping from middleboxes? I don't think it does.
      • egberts1 4y ago
        Like. I said, within a network accelerator lab (or in laymen terms, an artificial DDoS whitelab environment for testing middleboxes).
  • kortilla 4y ago
    “with hundreds of thousands of concurrent flows ”