[AusNOG] census issues tonight

[Andy Taylor]

Can’t Layer 7 attacks can be prevented by DDoS mitigation…?

GET/POST authentication, IP blocking, IP tables at the network level etc?

If it was an HTTP flood, why was the peering changed?

 

An interesting article on load balancing and DDoS mitigation

https://www.sans.org/reading-room/whitepapers/firewalls/leveraging-load-balancer-fight-ddos-33408 

 

Andy Taylor

Technical Director

 

0424 656 973

 



 

 <http://www.coastalaudio.com.au/> www.coastalaudio.com.au 

 

 

 

From: Scott Howard [mailto:scott at doc.net.au] 
Sent: Wednesday, 10 August 2016 10:22 AM
To: James Braunegg <james.braunegg at micron21.com>
Cc: andy at coastalaudio.com.au; Nathan Brookfield <Nathan.Brookfield at simtronic.com.au>; James Hodgkinson <yaleman at ricetek.net>; Tim Raphael <raphael.timothy at gmail.com>; ausnog at lists.ausnog.net
Subject: Re: [AusNOG] census issues tonight

 

On Tue, Aug 9, 2016 at 5:03 PM, James Braunegg <james.braunegg at micron21.com <mailto:james.braunegg at micron21.com> > wrote:

If you look on public peering exchanges around the world for an abnormal increase of traffic during last night, you don’t see any such increase, nor any evidence.

 

I.e. When CloudFlare reported a large 300gbit+ scale NTP reflection attack back in 2014 peering’s graphs around the world showed a spike in traffic.

 

You are presuming a network-based DDoS.  Application-level (D)DoS's are often much simpler to do, and will not result in a visible increase in traffic.

 

  Scott

No virus found in this message.
Checked by AVG - www.avg.com <http://www.avg.com> 
Version: 2016.0.7690 / Virus Database: 4633/12782 - Release Date: 08/09/16

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20160810/5bd0131f/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 16869 bytes
Desc: not available
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20160810/5bd0131f/attachment-0001.png>