News for hackers. Stuff that matters.

A comment on Defending the Internet: how Cloudflare blocked a monumental 7.3 Tbps DDoS attack. Parent comment

Re:Defending the Internet: how Cloudflare blocked a monument... by sybercecurity on Tuesday June 24, 2025 @09:59AM (#44366352)
Apparently no solution that has gained traction, and no single solution that works everywhere. Source address filtering (BCP 38) got us part of the way, but it's difficult/undesired to do in data centers.

IoT devices (speculated to be used here) would have to have a solution upstream. Things like MUD (RFC 8520) have been proposed, but have problems too - developers need to be able to list all communications of their device and make that available somehow (MUD profile server). Some consumers will never do it on their own, and may want to prevent alerting a device manufacturer they have a device (think connected adult toy...).

Also given that IoT devices may never be updated by their owners, expect to see IoT botnet DoS attacks for years.

[ Parent | on HN ]
Re:Defending the Internet: how Cloudflare blocked a monument... by citrin_ru on Thursday June 26, 2025 @06:20AM (#44385937)
> Source address filtering (BCP 38) got us part of the way, but it's difficult/undesired to do in data centers.

BCP 38 is applicable in the DC environment, especially between an operator (hosting/cloud provider) and the customer. Where it is from hard to not practical to use is the network backbone and link between different ISPs. But that's would be a minor problem if BCP 38 will be applied to all stub networks.

[ Parent | on HN ]