3 ms·
I'm curious to know the scale of this attack. It doesn't appear to be an exploit-based DDOS, just a raw flood of traffic. I don't know how built out they are in
by timdorr 17y ago
I'm curious to know the scale of this attack. It doesn't appear to be an exploit-based DDOS, just a raw flood of traffic. I don't know how built out they are in terms of upfront hardware, but ideally it should be 10G to the load balancers. And protecting that level of traffic isn't exceptionally difficult. Pop in 4 Cisco Anomaly Guard Modules and you've got 10G of DDOS coverage. And given Twitter's visibility and potential for angering folks indirectly, I think investing in that kind of hardware would be very wise.
- modoc 17y agoI wonder if the source of the attack might be related to the massive DDOS that took out SoftLayer's DNS servers last Tuesday. A massive volume of mal-formed UDP packets (~500k/second) from a very large number of IPs managed to bring down a distributed anycast based DNS system for approximately 18 hours. Seems odd to have two huge scale attacks launched within 10 days if they aren't somehow related (testing or proving out a botnet, etc...).
- tptacek 17y agoThe worst DDOS attacks aren't going to melt your load balancers; they're just going to saturate your connection. Cisco's anomaly products are designed for service providers, so that they can build "scrubbing centers" in their POPs. Trying to block DDOS traffic at the target is playing to lose.