4 ms·
Obviously such rules wouldn't automatically be in place; they'd have to explicitly be requested. And yes, it is a reasonable request to ask your upstream to add
by pktgen 13y ago
Obviously such rules wouldn't automatically be in place; they'd have to explicitly be requested. And yes, it is a reasonable request to ask your upstream to add a few ACL lines.
- scurvy 13y agoReally? How many transit providers today will enter custom ACLs for customers? Almost none of them will do this. The only time they will is when it's disrupting the rest of their network and other customers are complaining. Level3 was the last one I know that would put in an upstream ACL.
- ghshephard 13y agoThere is no other way to prevent a DDOS than to contact your upstream and say, "I'm getting 20 Gigabits of shit traffic that I'm not going to pay for. Make it go away." Other than buying ports that are greater size than any potential DDOS, that is the only way you can defend against a flood of traffic.
- scurvy 13y agoThere are services like Prolexic and Defense.net that you advertise your routes to, then they send you clean traffic. Providers won't care if you asked for the traffic or not. You'll get billed. They won't put in an ACL. Not today. 5 years ago, maybe. Today, no chance. They'll want to sell you their own DDoS mitigation services (at hefty fees). TWTC (and others) will sell you a "clean pipe" option which includes mitigation, and you only pay for what passes through mitigation. It's more expensive than regular transit, but it's an option if you want to keep things simple. ACLs are not an option today.