----- Original Message -----
From: "Tom Sands" <tsa...@rackspace.com>
Cc: <nanog@nanog.org>
Sent: Thursday, January 28, 2010 6:01 AM
Subject: Re: DDoS mitigation recommendations
-----Original Message-----
From: David Freedman [mailto:david.freed...@uk.clara.net]
Sent: Tuesday, January 26, 2010 8:17 AM
To: nanog@nanog.org
Subject: Re: DDoS mitigation recommendations
Arbor stuff comes to mind and works very well in our experiences....
Arbor++
We've already done an initial trial with the Arbor device, and it does
work well. Our biggest sticking point with it is that it lacks the
granular level of visibility and control that we've been used to and
often needed to tweak profiles. Basically, it does what it's supposed
to well, but you really can't tell what that is, and if it's not
catching all of a DDoS you have little insight as to what's being missed
or control to correct it.
Thank you,
Tom Sands
Chief Network Engineer
Rackspace
Out of curiousity, what's your baseline or "that we've been used"?
tv
