All: I did some searching and have not found any concrete replies on the list, but what carriers can offer L3 DDoS mitigation? Specifically, I noticed an old UUnet offering, but it seems like I must be speaking the wrong language to my sales drones. Specifically, we're dealing with AT&T, Qwest and Verizon Business. My thought is that they all offered some type of service like this, but my security folks have been driving this and having limited success. Names of other SPs (we're looking at Verisign) is helpful, but we are stuck with the Dallas area. Note: I am not interested in changing DNS records and prefixes should be able to be advertised through BGP like normal. (Apparently, people like to do funky DNS stuff to make this work and sometimes don't want to do BGP in other scenarios.) Thanks in advance, -- William McCall
Might also try Prolexic. Or level3, which resells Prolexic. And then there's other forms of redundancy - ultradns or similar for your nameservers, for example. On Wed, Apr 28, 2010 at 7:39 PM, William McCall <william.mccall@gmail.com> wrote:
All:
I did some searching and have not found any concrete replies on the list, but what carriers can offer L3 DDoS mitigation? Specifically, I noticed an old UUnet offering, but it seems like I must be speaking the wrong language to my sales drones. Specifically, we're dealing with AT&T, Qwest and Verizon Business. My thought is that they all offered some type of service like this, but my security folks have been driving this and having limited success.
Names of other SPs (we're looking at Verisign) is helpful, but we are stuck with the Dallas area.
Note: I am not interested in changing DNS records and prefixes should be able to be advertised through BGP like normal. (Apparently, people like to do funky DNS stuff to make this work and sometimes don't want to do BGP in other scenarios.)
Thanks in advance,
-- William McCall
-- Suresh Ramasubramanian (ops.lists@gmail.com)
-----Original Message----- From: William McCall [mailto:william.mccall@gmail.com] Sent: Wednesday, April 28, 2010 10:09 AM To: nanog@nanog.org Subject: DDoS mitigation services from SPs
All:
I did some searching and have not found any concrete replies on the list, but what carriers can offer L3 DDoS mitigation? Specifically, I noticed an old UUnet offering, but it seems like I must be speaking the wrong language to my sales drones. Specifically, we're dealing with AT&T, Qwest and Verizon Business. My thought is that they all offered some type of service like this, but my security folks have been driving this and having limited success.
Names of other SPs (we're looking at Verisign) is helpful, but we are stuck with the Dallas area.
Note: I am not interested in changing DNS records and prefixes should be able to be advertised through BGP like normal. (Apparently, people like to do funky DNS stuff to make this work and sometimes don't want to do BGP in other scenarios.)
Verizon Business and AT&T both have DDoS Detection & Mitigation Services available, as do other providers such as Tata, Prolexic, and Verisign. Providers like AT&T, Verizon, and Tata unfortunately do not sell services off-net, so you'll need to have the sites you want protected connected to their networks. Similarly, these providers tend to put "all their eggs in one basket" by using a singular technology for their service. On the other hand, providers like Prolexic and Verisign have very robust offerings selling off-net and utilizing multiple vendors as they understand a one-size-fits-all doesn't work. I'd strongly advocate talking to the Verisign folks as they really seem to be attracting all the top talent right now - I'd be willing to bet their offering is the one that others will eventually emulate. Cheers, Stefan Fouant, CISSP, JNCIEx2 www.shortestpathfirst.net GPG Key ID: 0xB5E3803D
Does any one have a contact at Prolexic? I've been attempting to get in touch with their sales force for 2-3 weeks with no success. Thanks, Jesse Proudman Blue Box Group, LLC p. 800-613-4305 x 801 www.blueboxgrp.com On Apr 28, 2010, at 7:25 AM, Stefan Fouant wrote:
Verizon Business and AT&T both have DDoS Detection & Mitigation Services available, as do other providers such as Tata, Prolexic, and Verisign. Providers like AT&T, Verizon, and Tata unfortunately do not sell services off-net, so you'll need to have the sites you want protected connected to their networks. Similarly, these providers tend to put "all their eggs in one basket" by using a singular technology for their service. On the other hand, providers like Prolexic and Verisign have very robust offerings selling off-net and utilizing multiple vendors as they understand a one-size-fits-all doesn't work. I'd strongly advocate talking to the Verisign folks as they really seem to be attracting all the top talent right now - I'd be willing to bet their offering is the one that others will eventually emulate.
I'm not sure they have a sales force anymore, one of the VP's is handling sales inquiries now so it's not a surprise that responses are latent or worse. Jeff On Wed, Apr 28, 2010 at 12:04 PM, Jesse Proudman <jesse.proudman-lists@blueboxgrp.com> wrote:
Does any one have a contact at Prolexic? I've been attempting to get in touch with their sales force for 2-3 weeks with no success.
Thanks,
Jesse Proudman Blue Box Group, LLC p. 800-613-4305 x 801 www.blueboxgrp.com
On Apr 28, 2010, at 7:25 AM, Stefan Fouant wrote:
Verizon Business and AT&T both have DDoS Detection & Mitigation Services available, as do other providers such as Tata, Prolexic, and Verisign. Providers like AT&T, Verizon, and Tata unfortunately do not sell services off-net, so you'll need to have the sites you want protected connected to their networks. Similarly, these providers tend to put "all their eggs in one basket" by using a singular technology for their service. On the other hand, providers like Prolexic and Verisign have very robust offerings selling off-net and utilizing multiple vendors as they understand a one-size-fits-all doesn't work. I'd strongly advocate talking to the Verisign folks as they really seem to be attracting all the top talent right now - I'd be willing to bet their offering is the one that others will eventually emulate.
-- Jeffrey Lyon, Leadership Team jeffrey.lyon@blacklotus.net | http://www.blacklotus.net Black Lotus Communications of The IRC Company, Inc. Follow us on Twitter at http://twitter.com/ddosprotection to find out about news, promotions, and (gasp!) system outages which are updated in real time. Platinum sponsor of HostingCon 2010. Come to Austin, TX on July 19 - 21 to find out how to "protect your booty."
Michael Renshaw Director of Global Partner Sales O 954-620-6002 x1018 D 954-620-1318 mrenshaw@prolexic.com -------------------------------------------------------------------------------- Tom Sands Chief Network Engineer Rackspace (210)312-4391 -------------------------------------------------------------------------------- Jesse Proudman wrote:
Does any one have a contact at Prolexic? I've been attempting to get in touch with their sales force for 2-3 weeks with no success.
Thanks,
Jesse Proudman Blue Box Group, LLC p. 800-613-4305 x 801 www.blueboxgrp.com
On Apr 28, 2010, at 7:25 AM, Stefan Fouant wrote:
Verizon Business and AT&T both have DDoS Detection & Mitigation Services available, as do other providers such as Tata, Prolexic, and Verisign. Providers like AT&T, Verizon, and Tata unfortunately do not sell services off-net, so you'll need to have the sites you want protected connected to their networks. Similarly, these providers tend to put "all their eggs in one basket" by using a singular technology for their service. On the other hand, providers like Prolexic and Verisign have very robust offerings selling off-net and utilizing multiple vendors as they understand a one-size-fits-all doesn't work. I'd strongly advocate talking to the Verisign folks as they really seem to be attracting all the top talent right now - I'd be willing to bet their offering is the one that others will eventually emulate.
Confidentiality Notice: This e-mail message (including any attached or embedded documents) is intended for the exclusive and confidential use of the individual or entity to which this message is addressed, and unless otherwise expressly indicated, is confidential and privileged information of Rackspace. Any dissemination, distribution or copying of the enclosed material is prohibited. If you receive this transmission in error, please notify us immediately by e-mail at abuse@rackspace.com, and delete the original message. Your cooperation is appreciated.
Thank you all for the information. This has helped us get a move in the right direction with both our carriers and alternative services. --WM On Wed, Apr 28, 2010 at 9:09 AM, William McCall <william.mccall@gmail.com> wrote:
All:
I did some searching and have not found any concrete replies on the list, but what carriers can offer L3 DDoS mitigation? Specifically, I noticed an old UUnet offering, but it seems like I must be speaking the wrong language to my sales drones. Specifically, we're dealing with AT&T, Qwest and Verizon Business. My thought is that they all offered some type of service like this, but my security folks have been driving this and having limited success.
Names of other SPs (we're looking at Verisign) is helpful, but we are stuck with the Dallas area.
Note: I am not interested in changing DNS records and prefixes should be able to be advertised through BGP like normal. (Apparently, people like to do funky DNS stuff to make this work and sometimes don't want to do BGP in other scenarios.)
Thanks in advance,
-- William McCall
participants (6)
-
Jeffrey Lyon -
Jesse Proudman -
Stefan Fouant -
Suresh Ramasubramanian -
Tom Sands -
William McCall