Jared Mauch <jared@xxxxxxxxxxxxxxx> wrote:
> But for the small percentage of spoofed packets, the cost on the rest
> is so high when we are often PPS limited on even the largest routers.
> The 40-byte packet benchmark of
> the late 90s isn’t seen today.
Tragedy of the commons... the cost here is balanced by the root name server
operators dealing with regular multi-Gb/s attacks.
(The last one, which seems to have been the largest to date, it is unclear to
me if it was with forged source address)
http://www.root-servers.org/news/events-of-20151130.txt
--
Michael Richardson <mcr+IETF@xxxxxxxxxxxx>, Sandelman Software Works
-= IPv6 IoT consulting =-
Attachment:
signature.asc
Description: PGP signature