Due to the nature of the defense against these attacks, some locations may be affected more than others. I haven’t noticed a complete loss of Fastmail services during the past few hours, but at times the system was much slower than normal.
Quote:
Originally Posted by hans2010
.. I wonder if the Internet can evolve to where DDoS attacks can be throttled at source.
|
The initial D in DDOS stands for “Distributed”, and this complicates the problem. If the attack packets are arriving from thousands of unrelated zombie infected devices from a wide range of locations, the old routing systems can’t throttle them at the sources. Many techniques have been proposed to add features to internet routers to allow them to be commanded to block attacks, such as:
https://www.faculty.ece.vt.edu/parkj...arch/AD_CR.pdf
https://www.cs.unc.edu/~jeffay/cours...ddos-src02.pdf
I don’t know if any of these have been actual deployed on a wide scale basis. For most of these techniques to be useful, I believe that they need to be deployed at the vast majority of edge routers where packets enter the internet.
Bill