Re: DDoS Mitigation Survey

2020-01-14 Thread Dobbins, Roland
On 15 Jan 2020, at 6:37, Lumin Shi wrote: > What we meant by "may not have necessary capacity" is that routers do > not > have enough CAM/TCAM space to deploy/install ACLs, BGP FlowSpec rules > against large-scale DDoS attacks without 1) incurring major collateral > damage (e.g., deploy /16 sour

Re: DDoS Mitigation Survey

2020-01-14 Thread Baldur Norddahl
I gave up on completing the survey because too many wrong assumptions are made. I am unable to convey what we actually do. Which of course is none of the choices given. We, or rather our customers, are frequently hit by low scale volumetric attacks. The primary way to deal with it is to have enoug

Re: DDoS Mitigation Survey

2020-01-14 Thread Töma Gavrichenkov
Peace, On Wed, Jan 15, 2020, 2:35 AM Lumin Shi wrote: > Thank you for the feedback (that is a good point)! > > In our study, we lump both cloud/anycast-based and customer-premise > mitigation solutions together as solutions from DDoS mitigation service > providers. > And we believe if you are we

Re: DDoS Mitigation Survey

2020-01-14 Thread Dobbins, Roland
On 14 Jan 2020, at 1:56, Lumin Shi wrote: > We believe that many routers on the Internet > today may not have the necessary capacity to perform fine-grained > traffic > filtering, especially when facing a large-scale DDoS attack with or > without > IP spoofing. There are literally decades of

Re: DDoS Mitigation Survey

2020-01-14 Thread Töma Gavrichenkov
Peace, On Tue, Jan 14, 2020, 10:22 PM Lumin Shi wrote: > With our preliminary survey so far, DDoS mitigation approaches in the real > world include 1) DDoS mitigation service providers (e.g., Akamai, > Cloudflare), 2) Remotely-Triggered Black Hole (RTBH), 3) BGP FlowSpec, and > 4) direct contact

Re: AWS Network Engineering contact?

2020-01-14 Thread Jason Kuehl
Log a ticket in the console. No one will help you until the ticket is in. Contact your TAM if you have one and give them the ticket number. On Tue, Jan 14, 2020 at 2:36 PM Hugo Slabbert wrote: > If you have Direct Connects you should be able to log a ticket in the AWS > console, no? And/or the c

Re: AWS Network Engineering contact?

2020-01-14 Thread Hugo Slabbert
If you have Direct Connects you should be able to log a ticket in the AWS console, no? And/or the customer with the AWS VPCs should be able to? That seems like the most logical starting point, yea? On Tue., Jan. 14, 2020, 11:28 Peter Serwe wrote: > I have a direct connect via Coresite LA1 over t

AWS Network Engineering contact?

2020-01-14 Thread Peter Serwe
I have a direct connect via Coresite LA1 over to AWS via US West 1, and a customer with VPC's in the east that are getting really bad throughput transferring files via the direct connect. We've isolated it to being an issue behind AWS's PE over a barely utilized 10G XC. Would anyone happen to kno

APRICOT 2020: Call for Papers Reminder - Few Slots Still Available!

2020-01-14 Thread Mark Tinka
Hi all. Just a gentle reminder that the APRICOT 2020 agenda still has a few slots left available, and the program committee would be keen to receive great papers to fill them up. You can find more details about the Call for Papers and submission details here:     https://2020.apricot.net/program

DDoS Mitigation Survey

2020-01-14 Thread Lumin Shi
Dear NANOG members, I am a senior Ph.D. student at the University of Oregon (UO). We are seeking your help to understand DDoS mitigation techniques toward volumetric link flooding attacks. With our preliminary survey so far, DDoS mitigation approaches in the real world include 1) DDoS mitigatio

CenturyLink Technical Contact

2020-01-14 Thread Cummings, Chris
Good Morning All, Is there anyone on the list from CenturyLink that can contact me offline? We have a private circuit that has been down for 2+ weeks and there is no resolution in sight. We have, of course, been working through the NOC and through our sales team, but have hit road-blocks on all