<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
You have DDoS scrubbing which can help to monitor the traffic and
only let through what is determined as legitimate traffic while
curbing the rest.<br>
<br>
You have services such as Black Lotus, and Micron21 DDoS protection
where on the event of an attack they will advertise the range to the
global route table, scrub the traffic clean, then send it on to you.
Black Lotus, last I looked, were US based nodes where as Micron21 is
AU based and can deliver over Megaport VXC etc.<br>
<br>
In the short term, RTBH is more than helpful if your upstream and
your upstreams upstream supports it. Most usually support down to
the /32, and gets the processing off your link and your routers. <br>
<br>
<div class="moz-cite-prefix">On 08/02/16 16:42, Nick Evendor wrote:<br>
</div>
<blockquote cite="mid:BLU183-W851AE3428867415739015CB2D50@phx.gbl"
type="cite">
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr">Yesterday we experienced an 850 megabit DDoS attack
towards a hosting customer which almost filled our gigabit
uplink and made our upstream provider call me on a Sunday due to
abnormal traffic on our port.<br>
<br>
Thank god it was Sunday so our network was underutilized with no
collateral damage and everything remained working, but I asked
the upstream provider what we can do about it other than null
routing the destination and they said purchase more capacity.<br>
<br>
In the past we have seen a few attacks but they have only been a
few hundred megabits and never come close to saturating our
gigabit uplink.<br>
<br>
What size attacks are people seeing and is it time to over
purchase bandwidth and move to a ten gigabit service.<br>
<br>
Nick<br>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
<br>
</body>
</html>