Belgian ISP under 250 Gbps DDoS for days on end

Re:Belgian ISP under 250 Gbps DDoS for days on end by MrStonedOne on Saturday September 18, 2021 @05:06PM (#28579302)

because nothing says you have to include your real ip in the src header of the ip packet if you don't care about the reply.

[ Parent | on HN ]

Re:Belgian ISP under 250 Gbps DDoS for days on end by sophacles on Sunday September 19, 2021 @10:52AM (#28584786)

rp_filter (reverse path) does. Problem is it's a leaf(ish) router solution: if the src ip is not in the locally attached subnet, drop it. Not every isp sets this up though, for whatever reason.

[ Parent | on HN ]

Re:Belgian ISP under 250 Gbps DDoS for days on end by MrStonedOne on Sunday September 19, 2021 @01:24PM (#28586106)

limiting your spoofability to ips by the same isp doesn't help, especially since many will have multiple subnets so it won't help your target's ability to filter the packets out

[ Parent | on HN ]