<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="" dir="auto"><br class=""><div><blockquote type="cite" class=""><div class="">On 8 Feb 2016, at 4:42 PM, Nick Evendor <<a href="mailto:nickevendor@outlook.com" class="">nickevendor@outlook.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" style="font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Yesterday we experienced an 850 megabit DDoS attack towards a hosting customer which almost filled our gigabit uplink and made our upstream provider call me on a Sunday due to abnormal traffic on our port.<br class=""><br class="">Thank god it was Sunday so our network was underutilized with no collateral damage and everything remained working, but I asked the upstream provider what we can do about it other than null routing the destination and they said purchase more capacity.<br class=""><br class="">In the past we have seen a few attacks but they have only been a few hundred megabits and never come close to saturating our gigabit uplink.<br class=""><br class="">What size attacks are people seeing and is it time to over purchase bandwidth and move to a ten gigabit service.<br class=""><br class=""></div></div></blockquote><div><br class=""></div><div>One option you’ve got would be to look at a DDoS mitigation service, of which there’s a fair few out there now (Micron21, Black Lotus, etc…), to squash the attack instead of trying to absorb it. People are seeing DDoS attacks nowadays well in excess of 10Gbps.</div><div><br class=""></div><div><br class=""></div><div>Chris</div></div></body></html>