Re: Carpet bombing, what's it look like now
Vincent Bernat via NANOG <[email protected]> Sat, 1 Aug 2026 15:35:13 +0200
| Newsgroups | gmane.org.operators.nanog |
|---|---|
| Message-ID | <[email protected]> |
On 2026-08-01 14:59, Saku Ytti wrote: >> I was focused on the very short attacks. The issue is not sampling, but >> the flow cache adding some latency, even when tuned down. That's the >> part IE 315 fixes: there is no cache anymore and the sampled packets are >> sent directly. > > I don't think that's accurate either. > > There is no reason why you couldn't cache in IE 315, I think. It makes little sense since you need to put the sampled packet header in the flow. You could put several of them or the first one or the last one, but why? AFAIK, all implementations of IE 315 bypass the cache. _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/[email protected]/message/IV4W2OIXMVU7WMR66JXTL6MKHHIBH3DM/