[c-nsp] DDoS + ME3600/ME3800

Lukasz Bromirski lukasz at bromirski.net
Thu Mar 28 04:54:18 EDT 2013


On Mar 27, 2013, at 5:18 PM, Nick Hilliard <nick at foobar.org> wrote:

> As this latest widely reported 300G spoof+amplification DDoS is causing
> actual service harm to third party networks, could someone from Cisco give
> some idea on when we can see uRPF on the ME3600/ME3800 product line up?
> 
> I really like these as PE boxes, but lack of uRPF on them is hurting badly.

uRPF is coming, both for IPv4 and IPv6. Unfortunately, it's still
in the future, not now.

-- 
"There's no sense in being precise when |               Łukasz Bromirski
 you don't know what you're talking     |      jid:lbromirski at jabber.org
 about."               John von Neumann |    http://lukasz.bromirski.net




More information about the cisco-nsp mailing list