[nsp-sec] Recent 20 Gbps microburst DoS attack

[Dobbins, Roland]

> On Dec 23, 2017, at 00:41, Nick Hilliard <nick at inex.ie> wrote:
> 
> we've observed that most ddos traffic contains a small % of packets
> which are marked with dscp > 48, which will be forwarded with precedence
> over network traffic (ospf, bgp, isis, etc).  

Actually, that's quite rare. But re-coloring at the edge is definitely a must, absolutely.

-----------------------------------
Roland Dobbins <rdobbins at arbor.net>