Selective Blackholing - How to Use & Deploy скачать в хорошем качестве

Selective Blackholing - How to Use & Deploy

Speakers: Job Snijders, NTT Communications While DDoS are commonplace in today's networks, effective mitigation is either very costly or you throw out the good with the bad when using a conventional blackhole community. In the author's humble opinion selective blackholing is very effective, and arguably the cheapest way to deal with DDoS attacks. This BGP community scheme is designed based on the theory that most prefixes (and content) have a geopgrahical significance which decreases as distance between the sender and receiver of traffic increases. Most often big DDoS attacks are sourced world-wide, but most legitimate visitors come from within a certain radius. In other words: a Texas gun shop owner doesn't care about Dutch visitors during a DDoS attack. The objective of this presentation is to explain how to interpretate selective blackhole communities as an end-user, and elaborate on how one might implement such a scheme as a network operator.