|
North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: Blackholing traffic by ASN
Once upon a time, Christopher Morrow <[email protected]> said: > > Nowadays, most equipment can blackhole internally (to null0 say) at full > > speed, so it isn't an issue. Just set your next hop to a good null0 > > style location on route import and you are done for traffic destined to > > those locations. > > ...do uRPF-loose-mode and you kill FROM these locations as well... On Cisco, but not Juniper. -- Chris Adams <[email protected]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.
|