[AusNOG] DDoS attack sizes

[James Braunegg]

Dear Andrew

Whilst it most certainly can seem like an arms race….

I believe more responsibility should be targeted towards network and server administrators to help mitigate and reduce the compromised hosts and vulnerable services thus minimizing the ammunition used to launch the attacks.

2016 the year of “Help Clean up the Internet”

Kindest Regards

James Braunegg
P:  1300 769 972  |  M:  0488 997 207 |  D:  (03) 9751 7616
E:   james.braunegg at micron21.com<mailto:james.braunegg at micron21.com>  |  ABN:  12 109 977 666
W:  www.micron21.com/ddos-protection<http://www.micron21.com/ddos-protection>   T: @micron21

Follow us on Twitter<http://www.twitter.com/micron21> for important service and system updates.

[M21.jpg]

This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.

From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Andrew Tschudi
Sent: Monday, 8 February 2016 4:59 PM
To: Nick Evendor <nickevendor at outlook.com>
Cc: ausnog at ausnog.net
Subject: Re: [AusNOG] DDoS attack sizes

The problem is even 10 gbit will not get you far it is arms race for capacity which you cannot win, perfect example is this 90 gbit attack.

http://www.micron21.com/90gbit-ddos.php

On Mon, Feb 8, 2016 at 4:42 PM, Nick Evendor <nickevendor at outlook.com<mailto:nickevendor at outlook.com>> wrote:
Yesterday we experienced an 850 megabit DDoS attack towards a hosting customer which almost filled our gigabit uplink and made our upstream provider call me on a Sunday due to abnormal traffic on our port.

Thank god it was Sunday so our network was underutilized with no collateral damage and everything remained working, but I asked the upstream provider what we can do about it other than null routing the destination and they said purchase more capacity.

In the past we have seen a few attacks but they have only been a few hundred megabits and never come close to saturating our gigabit uplink.

What size attacks are people seeing and is it time to over purchase bandwidth and move to a ten gigabit service.

Nick

_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20160208/ee07e0c2/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 2683 bytes
Desc: image001.jpg
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20160208/ee07e0c2/attachment-0001.jpg>