Hi, First submission so be nice :-) Ex. CenturyLink'er here so happy to share my knowledge of their network based solution if anyone is interested. Cheers Chris On Wed, 5 Feb 2020, 12:00 , <nanog-request@nanog.org> wrote:

Send NANOG mailing list submissions to nanog@nanog.org

To subscribe or unsubscribe via the World Wide Web, visit https://mailman.nanog.org/mailman/listinfo/nanog or, via email, send a message with subject or body 'help' to nanog-request@nanog.org

You can reach the person managing the list at nanog-owner@nanog.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of NANOG digest..."

Today's Topics:

1. Re: Recommended DDoS mitigation appliance? (Colton Conor) 2. RE: Recommended DDoS mitigation appliance? (Phil Lavin) 3. RE: Recommended DDoS mitigation appliance? (Kushal R.) 4. Re: Recommended DDoS mitigation appliance? (J. Hellenthal) 5. Re: Recommended DDoS mitigation appliance? (Colton Conor) 6. RE: Recommended DDoS mitigation appliance? (Phil Lavin) 7. Re: Jenkins amplification (Daryl) 8. Re: Jenkins amplification (Mike Meredith) 9. Re: EVPN multicast route (multi home case ) implementation / deployment information (Andrey Kostin) 10. WTR: 1-2RU @ Equinix Ashburn (Jason Lixfeld) 11. Help with survey on enterprise network challenges? (Joseph Severini) 12. Re: Jenkins amplification (Christopher Morrow) 13. Re: Has Anyone managed to get Delegated RPKI working with ARIN (Cynthia Revström) 14. Re: Has Anyone managed to get Delegated RPKI working with ARIN (Randy Bush)

----------------------------------------------------------------------

Message: 1 Date: Tue, 4 Feb 2020 07:40:18 -0600 From: Colton Conor <colton.conor@gmail.com> To: Javier Juan <javier.juan@gmail.com> Cc: Rabbi Rob Thomas <robt@cymru.com>, NANOG <nanog@nanog.org> Subject: Re: Recommended DDoS mitigation appliance? Message-ID: < CAMDdSzN0vhwK70Gd0EnNPRvP9QAfqoXZ_GUZiaVtgzcWgwN_GQ@mail.gmail.com> Content-Type: text/plain; charset="utf-8"

Javier,

So is Imperva similar to how Kentik operates? What was it priced liked? I like the Kentik solution, but their per router per month pricing is too expensive even for a small network.

On Mon, Feb 3, 2020 at 11:01 AM Javier Juan <javier.juan@gmail.com> wrote:

...

Hi !

I was looking around (a couple years ago) for mitigation appliances (Riorey, Arbor, F5 and so on).... but the best and almost affordable solution I found was Incapsula/Imperva.

https://docs.imperva.com/bundle/cloud-application-security/page/introducing/...

...

Basically, You send your flows to Imperva on cloud for analysis. As soon as they find DDoS attack , they activate mitigation. It´s some kind of elegant-hybrid solution without on-premise appliances . Just check it

out :)

...

Regards,

JJ

On Sun, Nov 17, 2019 at 11:20 PM Rabbi Rob Thomas <robt@cymru.com>

wrote:

...

...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256

Hello, NANOG!

I'm in the midst of rebuilding/upgrading our backbone and peering - sessions cheerfully accepted :) - and am curious what folks recommend in the DDoS mitigation appliance realm? Ideally it would be capable of 10Gbps and circa 14Mpps rate of mitigation. If you have a recommendation, I'd love to hear it and the reasons for it. If you have an alternative to an appliance that has worked well for you (we're a mix of Cisco and Juniper), I'm all ears.

Private responses are fine, and I'm happy to summarize back to the list if there is interest.

Thank you! Rob. - -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo McKern -----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEDcVjavXj08cL/QwdQ+hhYvqF8o0FAl3Rx08ACgkQQ+hhYvqF 8o0snw/8CxTOujcodNh/huMXZaUNlMNoNRz3IoPqBiAP9BZomMz9xqlpDW/qvWBF xhoJ07C0O0mo5ilNjnPR308uifIBu6ylw02PshOCU06dV0afgtndxGg5AoG9npUV 7uCi2afWaf22dq5TwKLut8QPNNQJTRzndX88xJw9MzzoBTemxRtM7ft4H3UhJ0hv oKo83FCNZQt36I+GZA9GBJeXM+o0f5h0w6fhRqARzttf6brJZdXgROyIQ7jptGuZ N3Yrjk/8RM4XKMnYbtIwl8NS3c0nEGN3ndn+Bz7p2FE7QJrZKonk/o03dvr2kU0Y 7gUQliOOzV9EsptVGyLCVyDJSElvXTBaps0giEVZhdmEIDJPWvBc+93j1g7xbmti 27lT6+5qBmEN0oKJWxXgtw9/n1yX9vsc7tXlgYDoXGhIlszdB3baRao1tYEp8BBQ hTGAULRfHe94tRzvOOQUQIuhzNcK1Q4E2jU6kzBB1wJsBD4zuHk+QIJLSHBmmnka VNKlQ+5zP8dmSMBp6k4feqAtt3hy0Bj+34FbdQZYPutIe3VXHEjpWI3jI9vKjhtC g7U/9CQIjVUl2APn1IllArpUpETBlNq7dSeJNUN/4Xh+eHglUnEn/m2kFG5mizmP d0YvLEVe0/+WzDUz+y3KxDVP5tdJT1VM46FHIgeiB4KrWNGRPUo= =uuel -----END PGP SIGNATURE-----