Re: Pros and Cons of Cloud Computing in dealing with DDoS

2009-11-08 Thread Sean Donelan
On Sun, 8 Nov 2009, Dobbins, Roland wrote: if the discussion hasn't shifted from that of DDoS to EDoS, it should. All DDoS is 'EDoS' - it's a distinction without a difference, IMHO. DDoS costs opex, can cost direct revenue, can induce capex spends - it's all about economics at bottom, always

Re: Pros and Cons of Cloud Computing in dealing with DDoS

2009-11-08 Thread Seth Mattinen
Sean Donelan wrote: Oh, the cloud service provider won't negotiate, won't give you unlimited service credits, want to charge extra for that protection, don't want to make promises it will work, and so on :-) The same unsolved problems from the 1970's mainframe/timesharing era still

RE: Pros and Cons of Cloud Computing in dealing with DDoS

2009-11-07 Thread Stefan Fouant
-Original Message- From: Florian Weimer [mailto:fwei...@bfk.de] Sent: Friday, November 06, 2009 4:52 AM To: Stefan Fouant Cc: 'Jeffrey Lyon'; 'NANOG list' Subject: Re: Pros and Cons of Cloud Computing in dealing with DDoS Some companies have already suffered from this because they

RE: Pros and Cons of Cloud Computing in dealing with DDoS

2009-11-07 Thread Stefan Fouant
-Original Message- From: Florian Weimer [mailto:fwei...@bfk.de] Sent: Friday, November 06, 2009 4:55 AM Not all attacks involve saturated pipes. There used to be anti-DDoS vendors whose boxes didn't even have WAN links. Part of the problem is that operating systems come with TCP

Re: Pros and Cons of Cloud Computing in dealing with DDoS

2009-11-07 Thread Dobbins, Roland
On Nov 8, 2009, at 2:33 AM, Stefan Fouant wrote: if the discussion hasn't shifted from that of DDoS to EDoS, it should. All DDoS is 'EDoS' - it's a distinction without a difference, IMHO. DDoS costs opex, can cost direct revenue, can induce capex spends - it's all about economics at

Re: Pros and Cons of Cloud Computing in dealing with DDoS

2009-11-06 Thread Florian Weimer
* Stefan Fouant: Which is why vendors selling DDoS mitigation equipment will always tell you to get a 15lb. bag first. ;) Their solutions work, but only if you got a bag big enough to store a lot of crap. Not all attacks involve saturated pipes. There used to be anti-DDoS vendors whose

RE: Pros and Cons of Cloud Computing in dealing with DDoS

2009-11-05 Thread Stefan Fouant
-Original Message- From: jeffrey.l...@gmail.com [mailto:jeffrey.l...@gmail.com] On Behalf Of Jeffrey Lyon Sent: Thursday, November 05, 2009 1:20 PM To: Stefan Fouant Cc: NANOG list Subject: Re: Pros and Cons of Cloud Computing in dealing with DDoS DDoS is a threat to the cloud

Re: Pros and Cons of Cloud Computing in dealing with DDoS

2009-11-05 Thread Joe Greco
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Nov 5, 2009 at 10:27 AM, Seth Mattinen se...@rollernet.us wrote: Jeffrey Lyon wrote: DDoS is a threat to the cloud just as DDoS is a threat to any other service when you fail to implement protection. Our company recently put out

Re: Pros and Cons of Cloud Computing in dealing with DDoS

2009-11-05 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Nov 5, 2009 at 10:27 AM, Seth Mattinen se...@rollernet.us wrote: Jeffrey Lyon wrote: DDoS is a threat to the cloud just as DDoS is a threat to any other service when you fail to implement protection. Our company recently put out a DDoS

Re: Pros and Cons of Cloud Computing in dealing with DDoS

2009-11-05 Thread Roland Dobbins
On Nov 6, 2009, at 2:11 AM, Stefan Fouant wrote: Obviously the cloud is no different than any other infrastructure insofar as implementing protection mechanisms. Ample bandwidth (typically more so than in the enterprise) should make it easier to absorb larger amounts of the bad stuff.

RE: Pros and Cons of Cloud Computing in dealing with DDoS

2009-11-05 Thread Stefan Fouant
-Original Message- From: Paul Ferguson [mailto:fergdawgs...@gmail.com] Sent: Thursday, November 05, 2009 8:26 PM On Thu, Nov 5, 2009 at 4:46 PM, Stefan Fouant sfou...@shortestpathfirst.com wrote: Actually, no - the miscreants are always going to have more bandwidth at their