Re:When “Dumb Pipes” Get Too Smart
by toast0 on Friday February 24, 2017 @10:23PM
(#13729844)
When you do have cooperative ISPs filtering DDoS traffic, it's usually a null route, so the IP under attack goes offline, but without taking the rest of the customers on your ISP offline.
[ Parent
| on HN ]
He described system that would work the other way around, null-route the ATTACKERS, not the victim.
Isn't that hard to do based on the distributed nature of DDOS attacks though?
Re:When “Dumb Pipes” Get Too Smart
by makerbraker on Saturday February 25, 2017 @06:41AM
(#13731149)
That's not quite how routing works -- null routing the attackers affects RETURN traffic to the attackers. By then, the damage is done, the target host is already overwhelmed with attack traffic.