I would love an upstream that accepts flowspec routes to get granular about
drops and to basically push "stateless ACLs" upstream.
_keeps dreaming_
We just need a signal to drop UDP for a prefix. The same as RTBH but only for UDP. This would prevent all volumetric attacks without the end user being cut off completely.
Besides from some games, VPN and VoIP, they would have an almost completely normal internet experience. DNS would go through the ISP servers and only be affected if the user is using a third party service.
Regards
Baldur