[Outages-discussion] [outages] NeuStar UltraDNS ? ** Why DDOS Neustar?

[Bill Woodcock]

On Jul 12, 2012, at 8:04 AM, David Conrad wrote:
> With an anycast deployment, it generally makes sense to deploy anycast instances close to eyeballs.  However, in a botnet attack, the sources of traffic are those eyeballs.  As a result, the anycast instances used by most folks are the ones that get hammered the hardest.

While that's true, the main benefit of broad anycast to DDoS mitigation is that it's a lot cheaper to pay for ten 40gb installations than one 400gb installation, for instance, and you're much more likely to be able to balance load amongst them than do any useful traffic engineering with only a single location.

                                -Bill




-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://puck.nether.net/pipermail/outages-discussion/attachments/20120712/86e19e44/attachment.sig>