Skip to content
HA

hades1995

Member

Joined:
Apr 2024
Last seen:
1mo ago
Posts
3
Threads
0
Likes
0
Reputation
0
HA

hades1995 1mo ago

DDoS protection on budget hosts is placebo · General Discussion

kate3 said:
No scrubbing center. Just a pipe and a prayer.

This. I ran a VPS at CloudCone for 8 months. Their "premium mitigation" is literally a Cogent upstream with RTBH. You can see it in the traceroute: cogentco.com hop, then dead. No GTT, no NTT, no path to any scrubber.

The $2/month...

HA

hades1995 1y ago

What do you use for inter-datacenter layer 2 extension? · Networking

Same workaround here but on Linux bridge with ebtables. Not CHR, just vanilla Debian with FRR. The ARP burst is the real enemy, not VXLAN itself.

We also saw it with OVS-DPDK. The DPDK poll mode driver doesn't care about your ARP storm, it just forwards faster.