Re: Carpet bombing, what's it look like now

[Vincent Bernat via NANOG <nanog () lists nanog org>]

On 2026-08-01 14:59, Saku Ytti wrote:

> > I was focused on the very short attacks. The issue is not sampling, but
> > the flow cache adding some latency, even when tuned down. That's the
> > part IE 315 fixes: there is no cache anymore and the sampled packets are
> > sent directly.
>
> I don't think that's accurate either.
>
> There is no reason why you couldn't cache in IE 315, I think.

It makes little sense since you need to put the sampled packet header in 
the flow. You could put several of them or the first one or the last 
one, but why? AFAIK, all implementations of IE 315 bypass the cache.
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/IV4W2OIXMVU7WMR66JXTL6MKHHIBH3DM/