RE: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-21 Thread Pekka Savola
On Wed, 20 Jan 2010, Stefan Fouant wrote: Completely agree on the disturbing observation of the increase in rate-limiting as a primary mitigation mechanism for dealing with DDoS. I've seen more and more people using this as a mitigation strategy, against my advice. For anyone interested in

Re: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-21 Thread Steve Bertrand
Pekka Savola wrote: On Wed, 20 Jan 2010, Stefan Fouant wrote: Completely agree on the disturbing observation of the increase in rate-limiting as a primary mitigation mechanism for dealing with DDoS. I've seen more and more people using this as a mitigation strategy, against my advice. For

Re: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-21 Thread Danny McPherson
On Jan 21, 2010, at 4:34 AM, Pekka Savola wrote: Thanks to Arbor for collecting the report and your observations. One thing I found extremely strange is that almost 50% report they use BCP38/Strict uRPF at peering edge, yet only about 33% use it in customer direction. (Figure 13, p20)

Re: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-21 Thread Danny McPherson
On Jan 20, 2010, at 8:32 AM, Stefan Fouant wrote: I'm wondering if you can clarify why 'Figure 1' only goes up to 2008 and states in key findings This year, providers reported a peak rate of only 49 Gbps. I happen to personally recall looking at ATLAS sometime last year and seeing an

Re: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-21 Thread Dobbins, Roland
On Jan 22, 2010, at 8:08 AM, Danny McPherson wrote: Yep, I think this is simply an artifact of a larger respondent pool size, with many smaller respondents being represented. Correct, as noted in the text, the change in survey demographics appears to be the cause of this shift.

RE: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-20 Thread Stefan Fouant
-Original Message- From: Dobbins, Roland [mailto:rdobb...@arbor.net] Sent: Wednesday, January 20, 2010 9:17 AM To: NANOG list Subject: 2009 Worldwide Infrastructure Security Report available for download. [Apologies for any duplication if you've seen this notification on other