RE: D/DoS mitigation hardware/software needed.

On Tue, 5 Jan 2010, Stefan Fouant wrote:

Almost all of the scalable DDoS mitigation architectures deployed in carriers or other large enterprises employ the use of an offramp method. These devices perform a lot better when you can forward just the subset of the traffic through as opposed to all. It just a simple matter of using static routing / RTBH techniques / etc. to automate the offramp.

That said, what are all those ISPs doing now that Cisco has stopped developing the Guard? -Hank