[AusNOG] BlackLotus Discontinue Free Guardian Service
Oliver Ransom
oliver at ransomit.com.au
Mon Jul 14 09:40:32 EST 2014
Hi All,
Depending on your traffic patterns I'd suggest network
providers or end users of providers who use services like Black
Lotus do some serious investigation into how attacks or
permanent DDOS mitigation from Black Lotus (or any other
provider for that matter) can affect overall traffic throughput
(and latency due to major routing changes). All the sales talk
and glowing feedback aside as an end customer of colocation and
transit service whose services in one POP have DDOS mitigation
by Black Lotus I would be wary about suggesting them to
everyone.
For example if you just run a webhosting company or something
and do a lot of outbound traffic then their mitigation could be
fantastic, but if you run a service where you have heavy
inbound data transfers as well or an otherwise more balanced
traffic profile then based on my findings and testing services
like Black Lotus can significantly slow down or degrade
transfer speeds. I don't have access to the exact reports or
settings that protect my network (in this case a /24 advertised
by one of my colocation providers) however it appears that if
you are attacked and the protection is "tightened" throughput
can drop to levels below 20% of what you might otherwise expect
to see.
Speaking with other industry contacts (some who take part in
this mailing list as well) I get the impression with traffic
levels well under 100mbit DDOS mitigation services should not
degrade throughput more than 5%, increases in latency aside due
to routing over some California POP or wherever else aside if
the reality was that throughput was decreased by 5% only it'd
probably be acceptable but my experience is far worse than
this.
For what it's worth my concerns have been raised with my
provider and we are working through the issue; but I felt it
might help others to know that these services can have
substantial negative affects as well.
I am happy to share more details about my testing and
experience; just ask if you're interested.
Regards,
Oliver
--
Oliver Ransom
oliver at ransomit.com.au
https://www.ransomit.com.au
On Sat, Jul 12, 2014, at 10:36 PM, James Braunegg wrote:
Dear Skeeve thanks for the introduction… and recommendations
from Gary and John !
I’ve been thinking about how best to reply to the many
questions asked already and came to the conclusion instead of
writing a long email outlining our services I’d summarize a few
quick points below and then provide a link for anyone who would
like to read more information rather than blasting pages of
text to everyone.
I’m also trying to be mindful to not release to much detailed
information as I’ll be presenting at AusNOG 2014 this year and
want to keep some things for my presentation so as a lead up to
AusNOG this year I welcome you all to come and please come say
hello me !
Ok, back to answering Skeeves questions …
Some of you might remember a email last year when I was calling
for Participants, this is where our services have evolved from.
To begin within I’m also not going to comment directly on Black
Lotus as I think that is unfair, however I will explain what we
believe our key points of differences are below.
Long Version -
[1]http://www.micron21.com/ausnog-ddos-service.php
Short Version - Below
Question ?
How quick does the protection work.?
Answer:
This depends on the type of service you’re using; along with if
you’re using manual or automatic diversion.
Using Micron21 as a permanent protection solution to protect an
Australian network providingalways-on continuous protection.
Using Micron21 as an ad-hoc protection solution with automatic
diversion creates a delay between 30 seconds to 3 minutes as
global BGP routes update with a more specific route.
Using Micron21 as an ad-hoc protection solution with manual
diversion creates a delay notifying the network owner plus a
delay between 30 seconds to 3 minutes as global BGP routes
update with a more specific route.
Obviously the key is the faster you can react to an incoming
DDoS attack the faster something can be done about it.The delay
in BGP rerouting traffic is the same for any DDoS provider who
relays on more specifically advertising segments of a network
for protection.
Key Facts About Our Service
·Micron21 being a Local Australian Company is not bound by the
Patriot Act, so you’re working with a team of Australians!
·Micron21 has been operating since 2007 and has been providing
Local Australian Network DDoS Protection services to Australian
Networks since 2013.
·Micron21 Peers directly with almost every major Australian
Network in some form, providing a direct way to establish BGP
bilateral relationships for protection services.
·We can protect a single /32 route if required without
rerouting a /24 segment
·Capable of supporting large attacks above and beyond customers
protection level 34.11 Gbit Case Study Here -
[2]http://www.micron21.com/34gbit-ddos.php
·No International GRE tunnels, we bring your international
traffic back to Australia over our dedicated Southern Cross
capacity
·No GRE tunnels on your router, assuming we can peer with you
directly (Pipe VIC, NSW, QLD, VIC IX and Megaport VCX) you we
do not need to use GRE tunnels minimizing the CPU overhead on
your routing platform.
·Free 24/7 Local phone support by Australian Micron21 staff
members for all mitigation events via our Australian Operation
Centre
·Local domestic traffic is cleaned within Australia solving all
data sovereignty issues
·International traffic is cleaned within Los Angeles and clean
traffic is brought directly back to Australia via Micron21
dedicated Southern Cross capacity.
·Future expansion into Singapore to combat DDoS traffic within
Asia
·Future expansion into Amsterdam to combat DDoS traffic within
Europe
·The benefit of establishing a direct local BGP session with
Micron21 for protection and monitoring not over your IP transit
service which would be isolated from typical attack traffic.
·Pay us in Australian Dollars – No International banking fee or
exchange rates
·6 Month free trial for all Australian Networks
·No lock in contracts – month to month commitment for our
scrubbing services
·Services available on Megaport – create a direct virtual cross
connection
·Services can be delivered via a physical cross connection in
any of our Melbourne pop sites
·Services can be delivered via Pipe Networks peering exchange
points in VIC, NSW and QLD
·Free interstate capacity backhaul (VIC, NSW, QLD) via any of
our peering exchange points let us deliver traffic directly to
you.
·Official local DDoS service supported by NSFOCUS within APAC
·We use the same hardware from NSFOCUS used by other
international providers ADS 6020
·Network Transparency – Micron21 network hidden from when
you’re using our service from trace route
·We do not charge you for clean traffic
·We provide a 5gbit burst of on demand protection above the
protection level you choose
Hope this clears everyone questions, if you have any more after
reading the long version please just ask !
Looking forward to meeting with many of you at AusNOG in Sydney
at the Swissôtel on 4 and 5 September 2014.
Kindest Regards
James Braunegg
P: 1300 769 972 | M: 0488 997 207 | D: (03) 9751 7616
E:[3]james.braunegg at micron21.com | ABN: 12 109 977 666
W:[4]www.micron21.com/ddos-protectionT: @micron21
Description: Description: Description: Description: M21.jpg
This message is intended for the addressee named above. It may
contain privileged or confidential information. If you are not
the intended recipient of this message you must not use, copy,
distribute or disclose it to anyone other than the addressee.
If you have received this message in error please return the
message to the sender by replying to it and then delete the
message from your computer.
From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf
Of Skeeve Stevens
Sent: Saturday, July 12, 2014 4:55 PM
To: Gary Buckmaster
Cc: ausnog at lists.ausnog.net
Subject: Re: [AusNOG] BlackLotus Discontinue Free Guardian
Service
Actually yes.... I learnt more about Micron21 and Blacklotus
the other day. But rather than me repeating it and maybe
getting it wrong, James, can you explain where Micron21 is
like/better than BlackLotus as you have to me recently.
I only ask this, not as a sales thing for Micron21, but so the
whole community can know the advantages without James having to
explain it one by one
...Skeeve
Skeeve Stevens - eintellego Networks Pty Ltd
[5]skeeve at eintellegonetworks.com ; [6]www.eintellegonetworks.co
m
Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve
[7]facebook.com/eintellegonetworks ; [8]linkedin.com/in/skeeve
[9]twitter.com/theispguy ; blog: [10]www.theispguy.com
[ein09.png]
The Experts Who The Experts Call
Juniper - Cisco - Cloud - Consulting - IPv4 Brokering
On Sat, Jul 12, 2014 at 4:13 PM, Gary Buckmaster
<[11]gary.buckmaster at digitalpacific.com.au> wrote:
Or for that matter, using a domestic service like Micron21
which is awesome and reasonably priced.
-------- Original message --------
From: Jared Hirst
Date:12/07/2014 15:39 (GMT+10:00)
To: Daniel Watson
Cc: [12]ausnog at lists.ausnog.net
Subject: Re: [AusNOG] BlackLotus Discontinue Free Guardian
Service
It's cheap as to buy and if you find it protects you why not
buy it?
On Saturday, July 12, 2014, Daniel Watson
<[13]Daniel at glovine.com.au> wrote:
Hi Guys
I woke up to this email, this morning.
I regret to inform you that after July 31st, we will no longer
be offering Free Guardian Service. Any free services you have
with Black Lotus will terminate on August 1st 2014.
Please let me know if you are interested in discussing moving
to one of our Paid Protection for Networks plans. Since you are
currently on Guardian, I can offer you a ramp discount to help
with the new cost of the service.
Best Regards,
--
Christine Gaylor
Sales Team, Black Lotus Communications
I was wondering if any other providers on-list offer a free
service or know of any other free services out there?
Regards,
Daniel Watson
Network Administrator / Network Operations Manager
E [14]Daniel at GloVine.com.au
W [15]www.GloVine.com.au
--
Jared Hirst
Chief Executive Officer
Office Address: 2/2 Teamster Close, Tuggerah NSW 2259
Postal Address: PO Box 3187, Tuggerah NSW 2259
Phone: +61 2 8115 8801 | Network Ops: +61 2 8115 8850 | Main
Switch: +61 2 8115 8888
Web:[16]www.serversaustralia.com.au
[17]Servers Australia - Logo
[18]How are we doing?
[19]please click here to tell Servers Australia - We‘re listening
[20]Find Us on Facebook [21]Follow us on Twitter [22]Follow us
on Google
Notice: This message may contain private and confidential
information intended only for the recipients. If you have
received this message in error please delete immediately and
notify the sender, as any distribution or reproduction of this
message is prohibited. The views & opinions expressed in this
e-mail are NOT necessarily those of Servers Australia
Please consider the environment before printing this email -
every year we are losing 40 million acres of oxygen producing
forests through logging and land clearing.
_______________________________________________
AusNOG mailing list
[23]AusNOG at lists.ausnog.net
[24]http://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________
AusNOG mailing list
[25]AusNOG at lists.ausnog.net
[26]http://lists.ausnog.net/mailman/listinfo/ausnog
Email had 1 attachment:
* image001.jpg
* 4k (image/jpeg)
References
Visible links
1. http://www.micron21.com/ausnog-ddos-service.php
2. http://www.micron21.com/34gbit-ddos.php
3. mailto:james.braunegg at micron21.com
4. http://www.micron21.com/ddos-protection
5. mailto:skeeve at eintellegonetworks.com
6. http://www.eintellegonetworks.com/
7. http://facebook.com/eintellegonetworks
8. http://linkedin.com/in/skeeve
9. http://twitter.com/theispguy
10. http://www.theispguy.com/
11. mailto:gary.buckmaster at digitalpacific.com.au
12. mailto:ausnog at lists.ausnog.net
13. mailto:Daniel at glovine.com.au
14. mailto:Daniel at GloVine.com.au
15. http://www.GloVine.com.au/
16. http://www.serversaustralia.com.au/
17. http://serversaustralia.com.au/
18. https://docs.google.com/a/serversaustralia.com.au/forms/d/1LN6H3Dc8TCJFmNH7pxVkAfrhP3MosGNAueA8hteFbIY/viewform#start=openform
19. https://docs.google.com/a/serversaustralia.com.au/forms/d/1LN6H3Dc8TCJFmNH7pxVkAfrhP3MosGNAueA8hteFbIY/viewform#start=openform
20. http://www.facebook.com/ServersAustralia
21. http://twitter.com/serversau
22. https://plus.google.com/112681060777876559914
23. mailto:AusNOG at lists.ausnog.net
24. http://lists.ausnog.net/mailman/listinfo/ausnog
25. mailto:AusNOG at lists.ausnog.net
26. http://lists.ausnog.net/mailman/listinfo/ausnog
Hidden links:
28. https://docs.google.com/a/serversaustralia.com.au/forms/d/1LN6H3Dc8TCJFmNH7pxVkAfrhP3MosGNAueA8hteFbIY/viewform#start=openform
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140713/325fc8e3/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 2683 bytes
Desc: not available
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140713/325fc8e3/attachment.jpg>
More information about the AusNOG
mailing list