- NANOG - lists.nanog.org

kornet.net ?
by frank＠try-us.de 08 Aug '03

08 Aug '03

Hello , is there someone from kornet.net out there, please contact me off list Thank you -- Best regards, Frank Kuempel mailto:frank@try-us.de If it's there and you can see it - it's REAL If it's there and you can't see it - it's TRANSPARENT If it's not there and you can see it - it's VIRTUAL If it's not there and you can't see it - it's GONE

1 0

The Cidr Report
by cidr-report＠potaroo.net 08 Aug '03

08 Aug '03

This report has been generated at Fri Aug 8 21:47:44 2003 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 01-08-03 123769 88284 02-08-03 123888 88324 03-08-03 123875 88313 04-08-03 123832 88371 05-08-03 123956 88403 06-08-03 124078 88377 07-08-03 123924 88399 08-08-03 124082 88572 AS Summary 15583 Number of ASes in routing system 6150 Number of ASes announcing only one prefix 1470 Largest number of prefixes announced by an AS AS701 : ALTERNET-AS UUNET Technologies, Inc. 73223680 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 08Aug03 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 124332 88571 35761 28.8% All ASes AS7132 855 236 619 72.4% SBIS-AS SBC Internet Services - Southwest AS701 1470 1032 438 29.8% ALTERNET-AS UUNET Technologies, Inc. AS4323 606 176 430 71.0% TW-COMM Time Warner Communications, Inc. AS7018 1371 962 409 29.8% ATT-INTERNET4 AT&T WorldNet Services AS3908 899 529 370 41.2% SUPERNETASBLK SuperNet, Inc. AS7843 557 218 339 60.9% ADELPHIA-AS Adelphia Corp. AS11305 358 38 320 89.4% INTERLAND-NET1 Interland Incorporated AS1221 1042 734 308 29.6% ASN-TELSTRA Telstra Pty Ltd AS6197 557 250 307 55.1% BATI-ATL BellSouth Network Solutions, Inc AS6198 499 194 305 61.1% BATI-MIA BellSouth Network Solutions, Inc AS4355 405 116 289 71.4% ERMS-EARTHLNK EARTHLINK, INC AS1239 944 666 278 29.4% SPRINTLINK Sprint AS6347 361 93 268 74.2% DIAMOND SAVVIS Communications Corporation AS25844 257 9 248 96.5% SKADDEN1 Skadden, Arps, Slate, Meagher & Flom LLP AS27364 317 84 233 73.5% ACS-INTERNET Armstrong Cable Services AS17676 250 24 226 90.4% GIGAINFRA Softbank BB Corp. AS22773 236 16 220 93.2% CCINET-2 Cox Communications Inc. Atlanta AS209 521 304 217 41.7% ASN-QWEST Qwest AS4134 319 123 196 61.4% CHINANET-BACKBONE No.31,Jin-rong Street AS705 481 302 179 37.2% ALTERNET-AS UUNET Technologies, Inc. AS6327 199 25 174 87.4% SHAWFIBER Shaw Fiberlink Limited AS2048 258 88 170 65.9% LANET-1 State of Louisiana AS2386 397 229 168 42.3% INS-AS AT&T Data Communications Services AS17557 301 139 162 53.8% PKTELECOM-AS-AP Pakistan Telecom AS14654 164 3 161 98.2% WAYPORT Wayport AS6140 290 135 155 53.4% IMPSAT-USA ImpSat AS3602 235 87 148 63.0% SPRINT-CA-AS Sprint Canada Inc. AS20115 473 327 146 30.9% CHARTER-NET-HKY-NC Charter Communications AS9583 239 100 139 58.2% SATYAMNET-AS Satyam Infoway Ltd., AS9800 195 56 139 71.3% UNICOM CHINA UNICOM Total 15056 7295 7761 51.5% Top 30 total Possible Bogus Routes 24.119.0.0/16 AS11492 CABLEONE CABLE ONE 61.12.32.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 61.12.34.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 64.30.64.0/19 AS14900 USLEC-CORP-1 USLEC Corp. 66.41.192.0/18 AS13367 ATT-BBND-B AT&T Broadband 82.140.128.0/18 AS15419 LRTC-AS SC "LRTC" Internet services 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA 140.240.0.0/13 AS1 GNTY-1 Genuity 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 165.212.0.0/16 AS7424 USANET USA.Net 166.16.0.0/16 AS7132 SBIS-AS SBC Internet Services - Southwest 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 ALTERNET-AS UUNET Technologies, Inc. 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and Space Administration 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services 192.136.79.0/24 AS719 AS719 LANLINK autonomous system 192.153.136.0/21 AS568 SUMNET-AS DISO-UNRRA 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. 193.0.0.0/21 AS3333 RIPE-NCC-AS RIPE NCC 193.108.205.0/24 AS21006 PDR-AS PDR AS for announcing own routes 193.111.60.0/22 AS24888 NEWTEL-AS NEWTEL ASN 193.149.128.0/18 AS8220 COLT COLT Internet - International Backbone - www.colt.net 193.222.192.0/19 AS21102 ASN-KIOSKAG KIOSK Autonomous System 194.13.0.0/17 AS1103 SURFNET-NL SURFnet, The Netherlands 195.80.233.0/24 AS12654 AS12654 RIPE NCC RIS Project. 195.149.72.0/24 AS15471 SNR-RO SNR - Societatea Nationala de Radiocomunicatii 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater Systems Center 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA 198.98.8.0/21 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 198.101.4.0/22 AS568 SUMNET-AS DISO-UNRRA 198.136.32.0/20 AS19329 MCNET Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.60.0.0/20 AS271 BCNET-AS University of British Columbia 199.79.32.0/20 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.140.0/24 AS3544 ITSDN-U7 DISA/UNRRA 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 201.118.64.0/20 AS19151 WEBUSENET-1 WebUseNet Corp 202.3.144.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.145.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.146.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.147.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.148.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.149.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.150.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.151.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.152.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.153.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.154.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.155.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.156.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.157.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.158.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.4.252.0/22 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.4.255.0/24 AS4799 UNSPECIFIED Ji Tong Communications Co., Ltd. 202.6.96.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.6.97.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.6.99.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.10.72.0/21 AS9716 AUSTAR-AS-AP Austar Entertainement 202.44.112.0/20 AS17458 CWNETDG-IO-AP Cable and Wireless 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.130.224.0/20 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.130.240.0/21 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.130.248.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 202.130.252.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 202.136.254.0/23 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.136.254.0/24 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.142.130.0/23 AS17820 DIL-AP DIRECT INTERNET LTD. 202.142.132.0/22 AS17820 DIL-AP DIRECT INTERNET LTD. 202.143.48.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.143.56.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.161.0.0/19 AS10097 FLOWCOM flow communications level 2 541 kent st sydney nsw 2000 202.161.0.0/21 AS4634 -No Whois Entry- 202.161.8.0/21 AS4634 -No Whois Entry- 202.164.192.0/19 AS7599 IPXC-AS-AP IP Exchange 202.165.0.0/19 AS9443 INTERNETPRIMUS-AS-AP Primus Telecommunications 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.76.128.0/24 AS9729 IS-AP iAdvantage Limited 203.76.224.0/24 AS9549 COMDEK-ISP-AS-AP Comdek ISP 203.78.125.0/24 AS17653 PCM-HK-AP Pacific Century Matrix 203.86.2.0/23 AS4058 APNIC-4058 Asia Pacific Network Information Centre 203.90.192.0/20 AS9658 ETPI-IDS-AS-AP Eastern Telecoms Phils., Inc. 203.135.99.0/24 AS2687 IBM-MMD-AS IBM 203.135.224.0/19 AS4058 APNIC-4058 Asia Pacific Network Information Centre 203.171.96.0/19 AS703 ALTERNET-AS UUNET Technologies, Inc. 203.171.102.0/24 AS703 ALTERNET-AS UUNET Technologies, Inc. 204.19.224.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 204.29.189.0/24 AS11755 WAYMARKCOMM Waymark Internet Services, Inc. 204.52.232.0/24 AS7177 DFWNET DFW Internet Services, Inc. 204.89.225.0/24 AS2495 KANREN Kansas Research and Education Network 204.154.240.0/21 AS11572 MEDIACOM Mediacom,llc / RidgeNet 204.192.0.0/10 AS3644 SPR-VPN Sprint 204.194.110.0/23 AS10588 ICSNET Intelligent Computer Solutions, Inc 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC 206.82.64.0/18 AS7029 ALLTELNET Alltel Information Services, Inc. 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications 206.126.0.0/19 AS5750 FLEXNET-HAWAII FlexNet Inc. 206.167.57.0/24 AS376 RISQ-AS Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 206.251.69.0/24 AS27429 TIL Telesat International Ltd. 207.47.39.0/24 AS816 UUNET-AS4 UUNET Technologies, Inc. 207.92.0.0/14 AS2551 ICG ICG NetAhead, Inc. 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETPA NuNet Inc 208.65.232.0/23 AS701 ALTERNET-AS UUNET Technologies, Inc. 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC 208.104.103.0/24 AS1239 SPRINTLINK Sprint 209.87.176.0/20 AS8182 DIGITALRIVER Digital River 209.104.252.0/22 AS12030 PACIFIC-ONLINE-PON Pacific Online Services 209.108.0.0/14 AS2551 ICG ICG NetAhead, Inc. 209.151.128.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 209.160.73.0/24 AS13415 LUMIX Lumix Communications, Inc. 209.169.219.0/24 AS189 GENUITY-AS189 Genuity 209.169.223.0/24 AS189 GENUITY-AS189 Genuity 209.172.0.0/18 AS7770 TRITON Triton Technologies, Inc. 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network Services 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.160.0/19 AS4355 ERMS-EARTHLNK EARTHLINK, INC 209.222.137.0/24 AS27429 TIL Telesat International Ltd. 209.240.96.0/19 AS10815 KCNET KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. 210.4.20.0/22 AS10095 -No Whois Entry- 210.4.60.0/24 AS10095 -No Whois Entry- 210.4.61.0/24 AS10095 -No Whois Entry- 210.213.0.0/19 AS6453 TELEGLOBE-AS Teleglobe Inc 211.27.156.0/24 AS9768 PUBNET1-AS KT 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. 216.47.32.0/19 AS11304 SPLUS Solutions Plus Inc. 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services 216.153.0.0/17 AS6203 ISDN-NET ISDN-Net Inc. 216.226.108.0/22 AS3602 SPRINT-CA-AS Sprint Canada Inc. Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Touchamerica
by Christopher J. Wolff 08 Aug '03

08 Aug '03

Hello, If there are any Touch America techs within reach of this email, could you please contact me off list. Thank you. Regards, Christopher J. Wolff, VP CIO Broadband Laboratories, Inc. http://www.bblabs.com chris(a)bblabs.com

1 0

testing bandwidth of big internet pipes
by Arjan Lugtenberg 07 Aug '03

07 Aug '03

Hi, We as a Dutch network provider deliver also ATM lines and other big internet pipes for several big company's over here. At the moment we are looking for a good badwidth test within your network to test the line and to see if the customer gets what he has asked/paid for. sometimes it happens we deliver a big ATM line (for instance) and after a couple of hours the customer complains about the actual line rate. These problems has to be tested at the point of delivery so that the customer and ourselves are convinced the right line is configured in the ATM backbone. The test has to be done in such a way that a full T1 can be pulled to the max. What kind of bandwidth tests do other people on the list use for these big lines? Are there any documents written about such kind of tests? Please let me know. Regards, Arjan

2 1

RE: Server Redundancy
by Austad, Jay 07 Aug '03

07 Aug '03

If the servers are in two separate locations, like two datacenters on either side of the country, you are stuck with DNS-based load balancing. Like others have mentioned, Cisco, F5 and others have products which will handle this for you and take into account some other factors when directing traffic. DNS load balancing works quite well, I've used the F5 BigIP and 3dns extensively, and the Foundry ServerIron (which is fairly cheap). A little more detail into what you are trying to do would help. The most common setup with this is to have multiple datacenters, and each datacenter has a cluster of identical servers behind something like a BigIP. The traffic is load balanced at that level, but your Global load balancer which hands out DNS communicates with the local guy to figure out what the current traffic ratio is and modifys its dns replys accordingly. There used to be a free one for linux called Eddie, which looked quite robust. I think it was eddieware.org or eddieware.com. There is also the linux virtual server project, but I don't believe it has support for Global load balancing, only local. As a side note, I've used Cisco's CSS, F5's stuff, Alteon, and Foundry. Out of all of them that I've used, the Foundry had the least problems and had a nicely structured config. I would recommend the CSS, but it seems to have quite a few bugs in the code that still need to be worked out, but the support for SSL acceleration is nice. F5... I used to really like F5. In fact, I was one of their beta sites back in 1999 and 2000. After some problems with code that "broke" things, we discontinued the beta program with them. Shortly after, their new releases were getting worse and worse, their support seemed unwilling to help (for almost $100k a year in support, you'd think they would care), so I switched to Foundry. An insider over at F5 told me that most of the people who had written the original code back in 1999/2000 were all gone, and most of the problems were a result of the new people not yet wrapping their heads around the code. This was about 2 years ago, so it's possible they've figured out how everything is put together and it's better now. For awhile though, it was quite bad. Feature-wise, F5 has more features than any of the other ones, Cisco CSS comes in a somewhat distant second place. For most people, any of the above will suffice and most of the features available in F5 and Cisco are just nice-to-have's and not a requirement. -jay > -----Original Message----- > From: Gerald [mailto:gcoon@inch.com] > Sent: Wednesday, August 06, 2003 1:12 PM > To: Jason Greenberg > Cc: nanog(a)merit.edu > Subject: Re: Server Redundancy > > > > On Wed, 6 Aug 2003, Jason Greenberg wrote: > > > > > Can I have some suggestions on how to load balance servers > that are on > > seperate IP blocks? Is there any way to perform translation at this > > level? Exclude DNS based balancing please... > > vrrp on FreeBSD is supposed to be a free solution to allow machines to > watch each other and take over IP addressing if connectivity is lost. > Depending on how remote your IP blocks are and how much > control you have > over the routing equipment in between, your only choice may be a > commercial solution. > > http://www.bsdshell.net/hut_vrrpimpl.html > > I've not used it, and the documentation is currently in French. > > The HUT project also has FreeBSD load balancing software for > free that is > supposed to function like F5/Alteon/Cisco LB. > > I've maintained the Cisco CS 1100 (when it was Arrowpoint) in > production. > You could VLAN remote machines into what you want to do on > that. I think > that equipment has changed quite a bit though since Cisco > bought them and > my experience is over a year old. > > G >

5 4

New Trojan
by netadm 07 Aug '03

07 Aug '03

Anyone having any fallout from: http://www.eweek.com/article2/0,3959,1130765,00.asp <http://www.eweek.com/article2/0,3959,1130765,00.asp>

7 6

RE: Server Redundancy
by Austad, Jay 07 Aug '03

07 Aug '03

> I've used them all fairly heavily, except the Foundry gear. > Alteon's my > personal fave. Biggest problem with the F5: hard drive. In my book, > that means you instantly need two, doubling the price. Same thing with the Cisco CSS. Even without a hard drive, you should have 2 of them anyway. How do you plan to do software upgrades or other certain types of maintenance without an outage if you don't have a second one? I've seen them flake out too, either by not passing traffic or by load balancing getting messed up somehow. In most of these situations, a failover to the standby unit fixed the problem (this was with F5 gear). -jay

8 9

RE: Server Redundancy
by Don Mills 07 Aug '03

07 Aug '03

We've been using the Linux Virtual Server project (which a previous poster mentioned) to do load balancing (locally) on web based apps, pop3, smtp and now iptable firewalls. It scales well, has multiple lb algorithms (wlc, rr, lc, wrr, etc.) and even multicasts out the connection info if you want so you can set up a bank of redundant lb's. It can work w/ NAT or ip tunneling or direct routing so it might be able to do global load balancing depending on the setup. We have a 10000+ user mail farm behind one and haven't seen a single hiccup... http://www.linuxvirtualserver.org/ -- Don Mills

1 0

WANTED: ISPs with DDoS defense solutions
by Lane Patterson 07 Aug '03

07 Aug '03

We have some DDoS-sensitive customers asking us to refer them to the best ISPs for "in-the-core" DDoS defense. Other than UUnet (hi Chris!) and MFN, I'm not aware of any ISPs in North America developing a reputation for consistent DDoS defense. Could folks contact me either off-list or on-list? It seems that large content providers and Tier2/3 bandwidth buyers would do well to collaborate on group RFP's for this type of thing to send the message to ISPs it is something to invest in (dare I say productize?). While UUnet's detection/blocking is great, it would be wonderful to see some more intelligent filtering of DDoS traffic ala RiverHead or similar approach that doesn't completely blackhole victim IPs. Cheers, -Lane Equinix

25 74

dcom worm released
by Len Rose 07 Aug '03

07 Aug '03

It seems to be true.. I haven't seen any code yet but-- http://lists.netsys.com/pipermail/full-disclosure/2003-August/007717.html

2 2