[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

legacy /8

On Sat, 03 Apr 2010 08:06:44 EDT, Jeffrey Lyon said:

> For small companies the cost of moving to IPv6 is far too great,
> especially when we rely on certain DDoS mitigation gear that does not
> yet have an IPv6 equivalent.

So?  How many people are *realistically* being hit by IPv6 DDoS right now?
(I saw a number in the last 2-3 days that 2-3% of spam is now being delivered
via SMTP-over-IPv6).  You may not need that gear as much as you thought...

Did you tell your mitigation gear vendor 5 years ago that their next model
needed to have IPv6 support?

Given that currently most stuff is dual-stack, and IPv6 isn't totally
widespread, what are the effects of doing IPv6 DDoS mitigation by simply
turning off IPv6 on your upstream link and letting traffic fall back to IPv4
where you have mitigation gear?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20100403/a14b4128/attachment.bin>