Unless done "well", for some sad value of "well", FQ technologies are very resistant to these sort of attacks, but AQM and FIFOs are not. fq_codel is actually more resistant in some ways than cake is, because the direct map hash has collisions.... a well formed against FQ attack has not been demonstrated, as yet, so far as I know.
https://blog.apnic.net/2022/10/26/acc-turbo-mitigates-pulse-wave-ddos-attacks-using-programmable-switches/ Detection before it hits the customer is hard. -- This song goes out to all the folk that thought Stadia would work: https://www.linkedin.com/posts/dtaht_the-mushroom-song-activity-6981366665607352320-FXtz Dave Täht CEO, TekLibre, LLC _______________________________________________ LibreQoS mailing list LibreQoS@lists.bufferbloat.net https://lists.bufferbloat.net/listinfo/libreqos