Re: RTBH Support Across the Industry

[Barry Greene via NANOG <nanog () lists nanog org>]

Suggestion …. Walk through the APRICOT 2022 talks with DDoS.

https://www.youtube.com/playlist?list=PLTAhO9aX5q8X5IS9M3m4fLtvQdjBp1UZ0
APRICOT 2022 - DDoS Resiliency Workshop
youtube.com

What I’m seeing in this conversation is the missing tools in the DDoS Toolkit that get integrated into DDoS playbooks.

RTBH was just the first element. 
We then had sRTBH when we created loose uRPF.
Then we taught peers how to take dRTBH and sRTBH and redirect traffic to a network sinkhole set up to track the attacks 
once redirected.
Then we had BGP community-based rate limiting. 
Chris Morrow (UUNET) and Job Snijders (NTT) then set up customer-based RTBH - where you, as a customer, can set up a 
BGP community and have it blocked at your upstream edge (giving you space to work the attack). 

Then we had work at Cisco and Arbor on industry-wide mitigation approaches. This would take time, so Flow-Spec was 
created as a stopgap. That Cisco/Arbor work was migrated into DOTS in the IETF. 

Listen to the sessions, especially the interviews.

Attachment: signature.asc
Description: Message signed with OpenPGP

_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/QXU25RMTV5YPKBTHNCFN572C27QM47BC/