[AusNOG] BlackLotus Discontinue Free Guardian Service

Sun Jul 13 14:13:10 EST 2014

Sorry yeah, I realised that 5 minutes after I posted, but was already in
the car on the way to meet friends for Lunch, didn't want to pull over to
correct myself :)  The choice is to either de-advertise that /24 and let
the whole block go via the US for scrubbing, or blackhole the /32 and have
that one customer not reachable domestically.

On 13 July 2014 09:51, Shannon Gernyi <shannon.gernyi at xsv.com.au> wrote:

> Provided *DDoS scrubber* advertise a more specific route than you for the
> attack, you don't really need all traffic going via them. It is, however,
> up to you to detect and advertise to your scrubber as required. This
> doesn't take 5 minutes.
> IE normally advertise a /23, detect attack, advertise relevant /24 to DDoS
> scrubber, traffic goes via DDoS Scrubber.
>
> Also (Nitpicking now): if you're automatically blackholing said /32, it's
> not going via US during the attack, it's simply getting dropped at your
> provider's edge.
>
> Furthermore, advertising more specific route as I alluded to, without
> playing with communities, will still result in part of the attack getting
> to you (traffic sourced within your provider's AS).
>
> It's more complex than this, but there's a few bit's of food for thought.
> This is assuming a dedicated link to your DDoS scrubber too ;)
>
> Cheers,
>
> Shannon
> au.linkedin.com/in/shannongernyi/
>
> ------------------------------
> *From: *"Damien Gardner Jnr" <rendrag at rendrag.net>
> *To: *"Trent Farrell" <tfarrell at riotgames.com>
> *Cc: *ausnog at lists.ausnog.net
> *Sent: *Sunday, 13 July, 2014 8:57:08 AM
>
> *Subject: *Re: [AusNOG] BlackLotus Discontinue Free Guardian Service
>
> I guess that's the thing.. Black lotus is not low-latency, it's in the US,
> so either ALL your traffic goes via the US, or you only use them to
> mitigate international DDoS traffic, and have enough domestic to weather
> out the domestic part of an attach (Of have a good automated blackholing
> system to drop the attacked /32 locally so it ends up going via the US
> during the attack)   (Though from the looks of Jared's post, that's about
> to change, woo!).
>
>
> On 13 July 2014 08:46, Trent Farrell <tfarrell at riotgames.com> wrote:
>
>> I don't know how that could compete at all with a permanent low-latency
>> off-ramp solution, so I'm not sure if that's accurate.
>>
>> Taking 5-10 minutes is brutal, and could potentially lead to 30-60
>> minutes of downstream problems if your firewalls fall over, for example.
>> I'd always pay for the off ramp if I didn't have the budget to do it myself.
>>
>> On Saturday, July 12, 2014, Damien Gardner Jnr <rendrag at rendrag.net>
>> wrote:
>>
>>> I'd certainly be interested to hear.  As I understood it, Micron21 are
>>> not a full-time provider, so you have to bear the first 5-10 minutes of the
>>> attack until they notice and login to your router and de-advertise the /24
>>> out your bgp, and then advertise it out theirs?..   Well, that's how it was
>>> explained to me by one of their customers when they took it up ~6 months
>>> ago?
>>>
>>>
>>> On 12 July 2014 23:52, Skeeve Stevens <
>>> skeeve+ausnog at eintellegonetworks.com> wrote:
>>>
>>>> Apparently Micron21 use the same hardware but offer some extra value...
>>>> but I will let those guys explain it as I am far from being an expert in
>>>> that area.
>>>>
>>>>
>>>> ...Skeeve
>>>>
>>>> *Skeeve Stevens - *eintellego Networks Pty Ltd
>>>>  skeeve at eintellegonetworks.com ; www.eintellegonetworks.com
>>>>
>>>> Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve
>>>>
>>>> facebook.com/eintellegonetworks ;  <http://twitter.com/networkceoau>
>>>> linkedin.com/in/skeeve
>>>>
>>>> twitter.com/theispguy ; blog: www.theispguy.com
>>>>
>>>>
>>>> The Experts Who The Experts Call
>>>> Juniper - Cisco - Cloud - Consulting - IPv4 Brokering
>>>>
>>>>
>>>> On Sat, Jul 12, 2014 at 10:17 PM, Jared Hirst <
>>>> jared.hirst at serversaustralia.com.au> wrote:
>>>>
>>>>> Black lotus just released a AU scrubbing centre :-)
>>>>>
>>>>> They now have a few around the world so I guess the best option for
>>>>> people wanting to be protected world wide is to get on board with black
>>>>> lotus. For the small amount it costs it's totally worth it!
>>>>>
>>>>> Every single day our portal is full of attacks being mitigated by
>>>>> black lotus :-)
>>>>>
>>>>> On Saturday, July 12, 2014, Skeeve Stevens <
>>>>> skeeve+ausnog at eintellegonetworks.com> wrote:
>>>>>
>>>>>> Actually yes.... I learnt more about Micron21 and Blacklotus the
>>>>>> other day.  But rather than me repeating it and maybe getting it wrong,
>>>>>> James, can you explain where Micron21 is like/better than BlackLotus as you
>>>>>> have to me recently.
>>>>>>
>>>>>> I only ask this, not as a sales thing for Micron21, but so the whole
>>>>>> community can know the advantages without James having to explain it one by
>>>>>> one
>>>>>>
>>>>>>
>>>>>> ...Skeeve
>>>>>>
>>>>>> *Skeeve Stevens - *eintellego Networks Pty Ltd
>>>>>>  skeeve at eintellegonetworks.com ; www.eintellegonetworks.com
>>>>>>
>>>>>> Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve
>>>>>>
>>>>>> facebook.com/eintellegonetworks ;  <http://twitter.com/networkceoau>
>>>>>> linkedin.com/in/skeeve
>>>>>>
>>>>>> twitter.com/theispguy ; blog: www.theispguy.com
>>>>>>
>>>>>>
>>>>>> The Experts Who The Experts Call
>>>>>> Juniper - Cisco - Cloud - Consulting - IPv4 Brokering
>>>>>>
>>>>>>
>>>>>> On Sat, Jul 12, 2014 at 4:13 PM, Gary Buckmaster <
>>>>>> gary.buckmaster at digitalpacific.com.au> wrote:
>>>>>>
>>>>>>> Or for that matter, using a domestic service like Micron21 which is
>>>>>>> awesome and reasonably priced.
>>>>>>>
>>>>>>>
>>>>>>> -------- Original message --------
>>>>>>> From: Jared Hirst
>>>>>>> Date:12/07/2014 15:39 (GMT+10:00)
>>>>>>> To: Daniel Watson
>>>>>>> Cc: ausnog at lists.ausnog.net
>>>>>>> Subject: Re: [AusNOG] BlackLotus Discontinue Free Guardian Service
>>>>>>>
>>>>>>> It's cheap as to buy and if you find it protects you why not buy it?
>>>>>>>
>>>>>>> On Saturday, July 12, 2014, Daniel Watson <Daniel at glovine.com.au>
>>>>>>> wrote:
>>>>>>>
>>>>>>>>  Hi Guys
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> I woke up to this email, this morning.
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> I regret to inform you that after July 31st, we will no longer be
>>>>>>>> offering Free Guardian Service. Any free services you have with Black Lotus
>>>>>>>> will terminate on August 1st 2014.
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> Please let me know if you are interested in discussing moving to
>>>>>>>> one of our Paid Protection for Networks plans. Since you are currently on
>>>>>>>> Guardian, I can offer you a ramp discount to help with the new cost of the
>>>>>>>> service.
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> Best Regards,
>>>>>>>>
>>>>>>>> --
>>>>>>>>
>>>>>>>> Christine Gaylor
>>>>>>>>
>>>>>>>> Sales Team, Black Lotus Communications
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> I was wondering if any other providers on-list offer a free service
>>>>>>>> or know of any other free services out there?
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> Regards,
>>>>>>>>
>>>>>>>> Daniel Watson
>>>>>>>>
>>>>>>>> Network Administrator / Network Operations Manager
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> E Daniel at GloVine.com.au
>>>>>>>>
>>>>>>>> W www.GloVine.com.au
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> Jared Hirst Chief Executive Officer
>>>>>>>
>>>>>>> Office Address: 2/2 Teamster Close, Tuggerah NSW 2259
>>>>>>> Postal Address: PO Box 3187, Tuggerah NSW 2259
>>>>>>> Phone: +61 2 8115 8801 | Network Ops: +61 2 8115 8850 | Main
>>>>>>> Switch: +61 2 8115 8888
>>>>>>> Web: www.serversaustralia.com.au
>>>>>>> [image: Servers Australia - Logo] <http://serversaustralia.com.au/> How
>>>>>>> are we doing?please click here to tell Servers Australia - We‘re
>>>>>>> listening
>>>>>>> <https://docs.google.com/a/serversaustralia.com.au/forms/d/1LN6H3Dc8TCJFmNH7pxVkAfrhP3MosGNAueA8hteFbIY/viewform#start=openform>[image:
>>>>>>> Find Us on Facebook] <http://www.facebook.com/ServersAustralia> [image:
>>>>>>> Follow us on Twitter] <http://twitter.com/serversau> [image: Follow
>>>>>>> us on Google] <https://plus.google.com/112681060777876559914>
>>>>>>>
>>>>>>> *Notice:* This message may contain private and confidential
>>>>>>> information intended only for the recipients. If you have received this
>>>>>>> message in error please delete immediately and notify the sender, as any
>>>>>>> distribution or reproduction of this message is prohibited. The views &
>>>>>>> opinions expressed in this e-mail are NOT necessarily those of Servers
>>>>>>> Australia
>>>>>>>
>>>>>>> Please consider the environment before printing this email - every
>>>>>>> year we are losing 40 million acres of oxygen producing forests through
>>>>>>> logging and land clearing.
>>>>>>>
>>>>>>>
>>>>>>> _______________________________________________
>>>>>>> AusNOG mailing list
>>>>>>> AusNOG at lists.ausnog.net
>>>>>>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>> --
>>>>> Jared Hirst Chief Executive Officer
>>>>>
>>>>> Office Address: 2/2 Teamster Close, Tuggerah NSW 2259
>>>>> Postal Address: PO Box 3187, Tuggerah NSW 2259
>>>>> Phone: +61 2 8115 8801 | Network Ops: +61 2 8115 8850 | Main Switch: +61
>>>>> 2 8115 8888
>>>>> Web: www.serversaustralia.com.au
>>>>> [image: Servers Australia - Logo] <http://serversaustralia.com.au/> How
>>>>> are we doing?please click here to tell Servers Australia - We‘re
>>>>> listening
>>>>> <https://docs.google.com/a/serversaustralia.com.au/forms/d/1LN6H3Dc8TCJFmNH7pxVkAfrhP3MosGNAueA8hteFbIY/viewform#start=openform>[image:
>>>>> Find Us on Facebook] <http://www.facebook.com/ServersAustralia> [image:
>>>>> Follow us on Twitter] <http://twitter.com/serversau> [image: Follow
>>>>> us on Google] <https://plus.google.com/112681060777876559914>
>>>>>
>>>>> *Notice:* This message may contain private and confidential
>>>>> information intended only for the recipients. If you have received this
>>>>> message in error please delete immediately and notify the sender, as any
>>>>> distribution or reproduction of this message is prohibited. The views &
>>>>> opinions expressed in this e-mail are NOT necessarily those of Servers
>>>>> Australia
>>>>>
>>>>> Please consider the environment before printing this email - every
>>>>> year we are losing 40 million acres of oxygen producing forests through
>>>>> logging and land clearing.
>>>>>
>>>>>
>>>>
>>>> _______________________________________________
>>>> AusNOG mailing list
>>>> AusNOG at lists.ausnog.net
>>>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>>>
>>>>
>>>
>>>
>>> --
>>>
>>> Damien Gardner Jnr
>>> VK2TDG. Dip EE. GradIEAust
>>> rendrag at rendrag.net -  http://www.rendrag.net/
>>> --
>>> We rode on the winds of the rising storm,
>>>  We ran to the sounds of thunder.
>>> We danced among the lightning bolts,
>>>  and tore the world asunder
>>>
>>
>>
>> --
>>
>> *Trent Farrell*
>>
>> *Riot Games*
>>
>> *IP Network Engineer*
>>
>> E: tfarrell at riotgames.com | IE:  +353 83 446 6809 | US: +1 424 285 9825
>>
>> Summoner name: Foro
>>
>>
>
>
> --
>
> Damien Gardner Jnr
> VK2TDG. Dip EE. GradIEAust
> rendrag at rendrag.net -  http://www.rendrag.net/
> --
> We rode on the winds of the rising storm,
>  We ran to the sounds of thunder.
> We danced among the lightning bolts,
>  and tore the world asunder
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
>

-- 

Damien Gardner Jnr
VK2TDG. Dip EE. GradIEAust
rendrag at rendrag.net -  http://www.rendrag.net/
--
We rode on the winds of the rising storm,
 We ran to the sounds of thunder.
We danced among the lightning bolts,
 and tore the world asunder
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140713/1b239da1/attachment.html>