Re: RTBH Support Across the Industry

--===============7538271504536802006==
Content-Type: multipart/signed;
	boundary="Apple-Mail=_9F3EB347-E8F6-499A-ADE7-7998E19F9496";
	protocol="application/pgp-signature";
	micalg=pgp-sha256


--Apple-Mail=_9F3EB347-E8F6-499A-ADE7-7998E19F9496
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Suggestion =E2=80=A6. Walk through the APRICOT 2022 talks with DDoS.

=
https://www.youtube.com/playlist?list=3DPLTAhO9aX5q8X5IS9M3m4fLtvQdjBp1UZ0=
=EF=BF=BC
APRICOT 2022 - DDoS Resiliency Workshop
youtube.com

What I=E2=80=99m seeing in this conversation is the missing tools in the =
DDoS Toolkit that get integrated into DDoS playbooks.

RTBH was just the first element.=20
We then had sRTBH when we created loose uRPF.
Then we taught peers how to take dRTBH and sRTBH and redirect traffic to =
a network sinkhole set up to track the attacks once redirected.
Then we had BGP community-based rate limiting.=20
Chris Morrow (UUNET) and Job Snijders (NTT) then set up customer-based =
RTBH - where you, as a customer, can set up a BGP community and have it =
blocked at your upstream edge (giving you space to work the attack).=20

Then we had work at Cisco and Arbor on industry-wide mitigation =
approaches. This would take time, so Flow-Spec was created as a stopgap. =
That Cisco/Arbor work was migrated into DOTS in the IETF.=20

Listen to the sessions, especially the interviews.=20



--Apple-Mail=_9F3EB347-E8F6-499A-ADE7-7998E19F9496
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEdoGA/YBcwd1ud+j1VW6TcBa/RfMFAmpoZQ4ACgkQVW6TcBa/
RfPvYAf8DcQ31s70KGVD6UrmskBbYKIICykBmClIOatceao1fsNUARdm5s8EJA/p
B0gSvkZQSalvGjkDQV/zQ9jXPlQ1nsIM0S1Wplv6kkINlKrM8qq0tk2WCRyfxNJQ
shPP6Z6PUvivQNizGDEjErN8Ubuu7TYK8fBr39Uq4R14yy4GyprozdlzSSW1MWbD
MDWyhVdx8o2AvW4E1SIg/zzXqxrBlpn4hujsoaaaMsjQD0NgT7AKX8nQ/JwIrK3O
p5n7f7b2I1ZgCig4yw7UVRyRhg3xspG7jmPoHaejsJt6fL6GBqgGuwZf1sFyn1Pw
pUnk4NMEIIFw/TAxQmoR0aFWJG0Myg==
=Q+2e
-----END PGP SIGNATURE-----

--Apple-Mail=_9F3EB347-E8F6-499A-ADE7-7998E19F9496--

--===============7538271504536802006==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/[email protected]/message/QXU25RMTV5YPKBTHNCFN572C27QM47BC/
--===============7538271504536802006==--