[AusNOG] BlackLotus Discontinue Free Guardian Service
Shannon Gernyi
shannon.gernyi at xsv.com.au
Sun Jul 13 09:51:44 EST 2014
Provided *DDoS scrubber* advertise a more specific route than you for the attack, you don't really need all traffic going via them. It is, however, up to you to detect and advertise to your scrubber as required. This doesn't take 5 minutes.
IE normally advertise a /23, detect attack, advertise relevant /24 to DDoS scrubber, traffic goes via DDoS Scrubber.
Also (Nitpicking now): if you're automatically blackholing said /32, it's not going via US during the attack, it's simply getting dropped at your provider's edge.
Furthermore, advertising more specific route as I alluded to, without playing with communities, will still result in part of the attack getting to you (traffic sourced within your provider's AS).
It's more complex than this, but there's a few bit's of food for thought. This is assuming a dedicated link to your DDoS scrubber too ;)
Cheers,
Shannon
au.linkedin.com/in/shannongernyi/
----- Original Message -----
From: "Damien Gardner Jnr" <rendrag at rendrag.net>
To: "Trent Farrell" <tfarrell at riotgames.com>
Cc: ausnog at lists.ausnog.net
Sent: Sunday, 13 July, 2014 8:57:08 AM
Subject: Re: [AusNOG] BlackLotus Discontinue Free Guardian Service
I guess that's the thing.. Black lotus is not low-latency, it's in the US, so either ALL your traffic goes via the US, or you only use them to mitigate international DDoS traffic, and have enough domestic to weather out the domestic part of an attach (Of have a good automated blackholing system to drop the attacked /32 locally so it ends up going via the US during the attack) (Though from the looks of Jared's post, that's about to change, woo!).
On 13 July 2014 08:46, Trent Farrell < tfarrell at riotgames.com > wrote:
I don't know how that could compete at all with a permanent low-latency off-ramp solution, so I'm not sure if that's accurate.
Taking 5-10 minutes is brutal, and could potentially lead to 30-60 minutes of downstream problems if your firewalls fall over, for example. I'd always pay for the off ramp if I didn't have the budget to do it myself.
On Saturday, July 12, 2014, Damien Gardner Jnr < rendrag at rendrag.net > wrote:
<blockquote>
I'd certainly be interested to hear. As I understood it, Micron21 are not a full-time provider, so you have to bear the first 5-10 minutes of the attack until they notice and login to your router and de-advertise the /24 out your bgp, and then advertise it out theirs?.. Well, that's how it was explained to me by one of their customers when they took it up ~6 months ago?
On 12 July 2014 23:52, Skeeve Stevens < skeeve+ausnog at eintellegonetworks.com > wrote:
<blockquote>
Apparently Micron21 use the same hardware but offer some extra value... but I will let those guys explain it as I am far from being an expert in that area.
...Skeeve
Skeeve Stevens - eintellego Networks Pty Ltd
skeeve at eintellegonetworks.com ; www.eintellegonetworks.com
Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve
facebook.com/eintellegonetworks ; linkedin.com/in/skeeve
twitter.com/theispguy ; blog: www.theispguy.com
The Experts Who The Experts Call
Juniper - Cisco - Cloud - Consulting - IPv4 Brokering
On Sat, Jul 12, 2014 at 10:17 PM, Jared Hirst < jared.hirst at serversaustralia.com.au > wrote:
<blockquote>
Black lotus just released a AU scrubbing centre :-)
They now have a few around the world so I guess the best option for people wanting to be protected world wide is to get on board with black lotus. For the small amount it costs it's totally worth it!
Every single day our portal is full of attacks being mitigated by black lotus :-)
On Saturday, July 12, 2014, Skeeve Stevens < skeeve+ausnog at eintellegonetworks.com > wrote:
<blockquote>
Actually yes.... I learnt more about Micron21 and Blacklotus the other day. But rather than me repeating it and maybe getting it wrong, James, can you explain where Micron21 is like/better than BlackLotus as you have to me recently.
I only ask this, not as a sales thing for Micron21, but so the whole community can know the advantages without James having to explain it one by one
...Skeeve
Skeeve Stevens - eintellego Networks Pty Ltd
skeeve at eintellegonetworks.com ; www.eintellegonetworks.com
Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve
facebook.com/eintellegonetworks ; linkedin.com/in/skeeve
twitter.com/theispguy ; blog: www.theispguy.com
The Experts Who The Experts Call
Juniper - Cisco - Cloud - Consulting - IPv4 Brokering
On Sat, Jul 12, 2014 at 4:13 PM, Gary Buckmaster < gary.buckmaster at digitalpacific.com.au > wrote:
<blockquote>
Or for that matter, using a domestic service like Micron21 which is awesome and reasonably priced.
-------- Original message --------
From: Jared Hirst
Date:12/07/2014 15:39 (GMT+10:00)
To: Daniel Watson
Cc: ausnog at lists.ausnog.net
Subject: Re: [AusNOG] BlackLotus Discontinue Free Guardian Service
It's cheap as to buy and if you find it protects you why not buy it?
On Saturday, July 12, 2014, Daniel Watson < Daniel at glovine.com.au > wrote:
<blockquote>
Hi Guys
I woke up to this email, this morning.
I regret to inform you that after July 31st, we will no longer be offering Free Guardian Service. Any free services you have with Black Lotus will terminate on August 1st 2014.
Please let me know if you are interested in discussing moving to one of our Paid Protection for Networks plans. Since you are currently on Guardian, I can offer you a ramp discount to help with the new cost of the service.
Best Regards,
--
Christine Gaylor
Sales Team, Black Lotus Communications
I was wondering if any other providers on-list offer a free service or know of any other free services out there?
Regards,
Daniel Watson
Network Administrator / Network Operations Manager
E Daniel at GloVine.com.au
W www.GloVine.com.au
--
Jared Hirst
Chief Executive Officer
Office Address: 2/2 Teamster Close, Tuggerah NSW 2259
Postal Address: PO Box 3187, Tuggerah NSW 2259
Phone: +61 2 8115 8801 | Network Ops: +61 2 8115 8850 | Main Switch: +61 2 8115 8888
Web: www.serversaustralia.com.au
How are we doing?
please click here to tell Servers Australia - We‘re listening
Notice: This message may contain private and confidential information intended only for the recipients. If you have received this message in error please delete immediately and notify the sender, as any distribution or reproduction of this message is prohibited. The views & opinions expressed in this e-mail are NOT necessarily those of Servers Australia
Please consider the environment before printing this email - every year we are losing 40 million acres of oxygen producing forests through logging and land clearing.
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog
</blockquote>
</blockquote>
--
Jared Hirst
Chief Executive Officer
Office Address: 2/2 Teamster Close, Tuggerah NSW 2259
Postal Address: PO Box 3187, Tuggerah NSW 2259
Phone: +61 2 8115 8801 | Network Ops: +61 2 8115 8850 | Main Switch: +61 2 8115 8888
Web: www.serversaustralia.com.au
How are we doing?
please click here to tell Servers Australia - We‘re listening
Notice: This message may contain private and confidential information intended only for the recipients. If you have received this message in error please delete immediately and notify the sender, as any distribution or reproduction of this message is prohibited. The views & opinions expressed in this e-mail are NOT necessarily those of Servers Australia
Please consider the environment before printing this email - every year we are losing 40 million acres of oxygen producing forests through logging and land clearing.
</blockquote>
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog
</blockquote>
--
Damien Gardner Jnr
VK2TDG. Dip EE. GradIEAust
rendrag at rendrag.net - http://www.rendrag.net/
--
We rode on the winds of the rising storm,
We ran to the sounds of thunder.
We danced among the lightning bolts,
and tore the world asunder
</blockquote>
--
Trent Farrell
Riot Games
IP Network Engineer
E: tfarrell at riotgames.com | IE: +353 83 446 6809 | US: +1 424 285 9825
Summoner name: Foro
</blockquote>
--
Damien Gardner Jnr
VK2TDG. Dip EE. GradIEAust
rendrag at rendrag.net - http://www.rendrag.net/
--
We rode on the winds of the rising storm,
We ran to the sounds of thunder.
We danced among the lightning bolts,
and tore the world asunder
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140712/3181f399/attachment-0001.html>
More information about the AusNOG
mailing list