[AusNOG] Network Stress Test Results - Frightening speeds of 900+ mbits

[Joshua D'Alton]

Oh sure if you're talking AU hosted then I'd imagine AWS might be able to
exceed any AU capacity (though, it is AWS -> single path -> end host, there
could be limited capacity issues along just that path, vs a ddos that can
come in on all your links...), I was thinking more on a global scale
though, especially given the locations of most of the booter hosts and
attack nodes. IE, protecting against a medium sized multiple-10Gbps booter
is probably not possible inside AU, making an AU company/site perhaps
consider a non-local solution.

Though, that's where those loverly folks at cloudflare come in, :)


On Sat, Oct 19, 2013 at 10:49 PM, Peter Betyounan <
peter at serversaustralia.com.au> wrote:

> Josh,
>
> It's enough to test and simulate DDoS projected numbers and analyse the
> data. Do you really think pushing 10gbits+ anywhere in Australia won't
> raise a few alarm bells and cause havoc? I know no transit provider would
> appreciate uncontrolled booter testing on their networks because someone
> thought it was cool. Australian pipes are tiny in caparison to anywhere
> else and any DDoS of that scale locally affects literally everyone who
> traverses through it.
>
>
>
> On Sat, Oct 19, 2013 at 10:42 PM, Joshua D'Alton <joshua at railgun.com.au>wrote:
>
>> Oh sure that would work from layer 7 perspective, probably, but I'm not
>> sure about the other attacks that involve a thousand - tens of thousands of
>> hosts to achieve the level of bandwidth. Or is AWS able to deliver 100mbps+
>> x50 nodes minimum?
>>
>>
>> On Sat, Oct 19, 2013 at 10:38 PM, Peter Betyounan <
>> peter at serversaustralia.com.au> wrote:
>>
>>> Spin up a swarm of 50 or so EC2 instances and write a few lines of code.
>>> Press a button and sit back and watch. Many companies already do this the
>>> legal way, I am not too happy about advertising these methods to places
>>> like whirlpool which in turn is just empowering kids who think it's fun and
>>> cheap. Even if you educated one single person on what a booter is the
>>> damage is done already.
>>>
>>>
>>>
>>> On Sat, Oct 19, 2013 at 10:26 PM, Joshua D'Alton <joshua at railgun.com.au>wrote:
>>>
>>>> Can you elaborate?
>>>>
>>>>
>>>> On Sat, Oct 19, 2013 at 12:16 AM, Dobbins, Roland <rdobbins at arbor.net>wrote:
>>>>
>>>>>
>>>>> There are legal, safe ways to test resilience to DDoS attacks; but
>>>>> using a service of this type isn't among them.
>>>>>
>>>>>
>>>>
>>>> _______________________________________________
>>>> AusNOG mailing list
>>>> AusNOG at lists.ausnog.net
>>>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>>>
>>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20131019/4141e92f/attachment.html>