[c-nsp] uRPF Core Internet Routers

Dobbins, Roland rdobbins at arbor.net
Tue Apr 16 22:04:27 EDT 2013


On Apr 17, 2013, at 8:42 AM, Lee wrote:

> But the IPv4 address space is close to all allocated, so enabling it for IPv4 doesn't seem like a huge win.  

This is incorrect, and is actually harmful misinformation.

The value of antispoofing has nothing to do with allocated address space percentages.  It has everything to do with removing the ability to launch high-volume reflection/amplification DDoS attacks, spoofed SYN-floods, et. al.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton




More information about the cisco-nsp mailing list