rssLink RSS for all categories
 
icon_red
icon_green
icon_red
icon_red
icon_blue
icon_green
icon_green
icon_red
icon_red
icon_red
icon_orange
icon_green
icon_green
icon_green
icon_green
icon_blue
icon_green
icon_orange
icon_red
icon_green
icon_red
icon_red
icon_green
icon_red
icon_red
icon_red
icon_red
icon_orange
icon_green
 

FS#4441 — FS#8375 — Attack Aspirator

Attached to Project— Network
Maintenance
Whole Network
CLOSED
100%
Yesterday, we established an Attack Aspirator:
that allows to aspire attacks against external targets and internal ones.

We had some packet when one of the 2 routers of RBX to one of the 4 DC due to an attack that was bigger than the size of the aspirator pipe (10G). So the router could not send the packets on the aspirator impacting 1 of 4 DC.

We set a limitation of 6Gbps to the aspirator from the 2 routers of RBX.
Date:  Friday, 05 April 2013, 00:40AM
Reason for closing:  Done
Comment by OVH - Friday, 05 April 2013, 00:40AM

We have separated the two flows that we are aspiring:
- Ovh attacking internet
- Internet attacking OVH.

Flow "Ovh to internet" is aspired, and it was the cause of the problem. therefore we limited it to 1Mbps.

Regarding attacks "internet to OVH", we go through the future infra arbor/tilera , So we do not drop the packets foolishly and there is not much flow (1-2Gbps for all attacks totally).