Re: [AFMUG] Denial of service mitigation

2015-07-11 Thread Paul Stewart
From: Af [mailto:af-boun...@afmug.com] On Behalf Of Mike Hammett Sent: Thursday, July 9, 2015 10:17 PM To: af@afmug.com <mailto:af@afmug.com> Subject: Re: [AFMUG] Denial of service mitigation It probably differs based on the company. - Mike Hammett Intelligent Computing S

Re: [AFMUG] Denial of service mitigation

2015-07-10 Thread Simon Westlake
e received this electronic message in error, please notify us immediately and destroy the original message and all copies. *From:*Af [mailto:af-boun...@afmug.com] *On Behalf Of *TJ Trout *Sent:* July 9, 2015 12:28 AM *To:* af@afmug.com *Subject:* Re: [AFMUG] Denial of service mitigation How's that

Re: [AFMUG] Denial of service mitigation

2015-07-10 Thread Daniel White
Social: <http://www.linkedin.com/in/danielwhite84> LinkedIn: <https://twitter.com/DanielWhite84> Twitter From: Af [mailto:af-boun...@afmug.com] On Behalf Of Paul Stewart Sent: Friday, July 10, 2015 4:22 AM To: af@afmug.com Subject: Re: [AFMUG] Denial of service mitigation Possibl

Re: [AFMUG] Denial of service mitigation

2015-07-10 Thread Paul Stewart
Mike Hammett Sent: Thursday, July 9, 2015 10:17 PM To: af@afmug.com Subject: Re: [AFMUG] Denial of service mitigation It probably differs based on the company. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com _ From: "Paul Stewart"

Re: [AFMUG] Denial of service mitigation

2015-07-09 Thread Mike Hammett
It probably differs based on the company. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com - Original Message - From: "Paul Stewart" To: af@afmug.com Sent: Thursday, July 9, 2015 8:05:09 PM Subject: Re: [AFMUG] Denial of service mitigation

Re: [AFMUG] Denial of service mitigation

2015-07-09 Thread Paul Stewart
DDOS occurs to ensure the traffic hits their scrubbing center…. Not ideal in my opinion…. From: Af [mailto:af-boun...@afmug.com] On Behalf Of Andreas Wiatowski Sent: Thursday, July 9, 2015 11:23 AM To: af@afmug.com Subject: Re: [AFMUG] Denial of service mitigation >From what I investiga

Re: [AFMUG] Denial of service mitigation

2015-07-09 Thread Andreas Wiatowski
: af@afmug.com Subject: Re: [AFMUG] Denial of service mitigation How's that going to work? Route all of your traffic to them first by VPN? I think that's just for websites...? On Wed, Jul 8, 2015 at 8:57 PM, Seth Mattinen mailto:se...@rollernet.us>> wrote: On 7/8/15 7:48 PM, Andreas

Re: [AFMUG] Denial of service mitigation

2015-07-09 Thread Mike Hammett
.com Sent: Wednesday, July 8, 2015 9:48:16 PM Subject: [AFMUG] Denial of service mitigation Wondering if anyone has a magic answer to DDOS mitigation beyond “buy more bandwidth”? We a couple of attacks this evening and had to turn of block advertisements for quite some time… Cheers,

Re: [AFMUG] Denial of service mitigation

2015-07-09 Thread Paul Stewart
: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Baird Sent: Thursday, July 9, 2015 7:17 AM To: af@afmug.com Subject: Re: [AFMUG] Denial of service mitigation They will typically announce your networks via BGP and then route the clean traffic back to you via private transport (often

Re: [AFMUG] Denial of service mitigation

2015-07-09 Thread Josh Baird
They will typically announce your networks via BGP and then route the clean traffic back to you via private transport (often encapsulated in a GRE tunnel). This is extremely expensive. Josh On Thu, Jul 9, 2015 at 12:27 AM, TJ Trout wrote: > How's that going to work? Route all of your traffic t

Re: [AFMUG] Denial of service mitigation

2015-07-09 Thread Paul Stewart
:28 AM To: af@afmug.com Subject: Re: [AFMUG] Denial of service mitigation How's that going to work? Route all of your traffic to them first by VPN? I think that's just for websites...? On Wed, Jul 8, 2015 at 8:57 PM, Seth Mattinen mailto:se...@rollernet.us> > wrote: O

Re: [AFMUG] Denial of service mitigation

2015-07-08 Thread TJ Trout
How's that going to work? Route all of your traffic to them first by VPN? I think that's just for websites...? On Wed, Jul 8, 2015 at 8:57 PM, Seth Mattinen wrote: > On 7/8/15 7:48 PM, Andreas Wiatowski wrote: > >> Wondering if anyone has a magic answer to DDOS mitigation beyond “buy >> more ban

Re: [AFMUG] Denial of service mitigation

2015-07-08 Thread Seth Mattinen
On 7/8/15 7:48 PM, Andreas Wiatowski wrote: Wondering if anyone has a magic answer to DDOS mitigation beyond “buy more bandwidth”? Other than having excess bandwidth to absorb it or null routing the target IP upstream, there's DDoS scrubbing services like Prolexic. ~Seth

Re: [AFMUG] Denial of service mitigation

2015-07-08 Thread TJ Trout
I'm not really an expert by any means, but from what I've learned your can either filter it at your core/edge routers and take the bandwidth hit (assuming excess cpu and bandwidth) or block it farther upstream either manually by per incident request with your upstream or a bgp black hole community.

[AFMUG] Denial of service mitigation

2015-07-08 Thread Andreas Wiatowski
Wondering if anyone has a magic answer to DDOS mitigation beyond “buy more bandwidth”? We a couple of attacks this evening and had to turn of block advertisements for quite some time… Cheers, Andreas Wiatowski, CEO Silo Wireless Inc. 519-449-5656 x-600