undefined | Better HN

0 pointsaeden13y ago0 comments

I tried to add some insight on another comment, but it's tough to say anything about DDoS that hasn't already been said. DDoS attacks suck, mitigating them requires a multi-prong approach and proactive monitoring and agressive banning and even then you can still be screwed if your bandwidth is saturated.

I feel for the operational folks at Zerigo - dealing with this type of outage is hard. The best thing they can do at this point is get back on Twitter and talk to their customers - the last post was 4 hours ago - that's a lifetime when your system is critical.

0 comments

2 comments · 2 top-level

genek13y ago

How much capacity does DNSimple have though. It appears as though you are another unicast network. ns1.dnsimple.com is a server at Slicehost / Rackspace ns2.dnsimple.com is a server at Linode ns3.dnsimple.com is a server at prgmr.com / EGIHosting / Hurricane Electric ns4.dnsimple.com is a EC2 instance on Amazon

How much computing power and attack traffic can those really handle?

If you are going to offer a solution to a massive DDoS I would think that you would be careful on when to propose your solution.

Instead of adding another unicast network to the mix, why wouldn't you start using an IP anycast network?

Please explain how much capacity you have.

_phred13y ago

And DNS is, by definition, critical.

j / k navigate · click thread line to collapse