Hacker News Reader

Comment by pavel_odintsov | Hacker News Reader

FastNetMon does not implement DOTS yet. Instead, we support API for scrubbing centres/boxes directly.

Are there some good open source scrubbing center projects you might be able to recommend?

Also might you have any resources or links to how these scrubbing services are implemented, what heuristics they use etc?

I understand the front end of DDOS mitigation i.e netflows, BGP communities and RTBH, and GRE tunnels to the scrubbing centers. However the details of how the scrubbing centers works is something of a mystery to me.

When looking at any of the big DDOS provider's literature, the scrubbing centers are mostly just opaque boxes with little documentation on how they actually work.

You could consider this thing https://github.com/luigirizzo/netmap-ipfw

Thanks, unfortunately the documentation about the project is rather scant.

You could read my blog post about it instead: https://translate.google.com/translate?hl=en&sl=ru&tl=en&u=h...

It's in russian but Google trsnalate crashes language baarriers! :)

Thanks! This is helpful. I like your blog name, I'm assuming that translation is correct :)

Also, we sent a number of ideas/suggestions to DOTS. And I do not think that our feedback was taken into consideration.

You sent a slide deck that proposed throwing out all the DOTS work after that work had been underway for more than two years.

https://mailarchive.ietf.org/arch/search/?email_list=dots&q=...

This message was prepared about 14 months ago and shared privately with WG members. So, at least few persons from this WG saw it.

You sat on the deck for a year?

Probably, we went away from the topic. Feel free to raise PR if you want to have DOTS in FastNetMon. We'll review it carefully and if it fits our design guidance we will accept it.

Thanks :)

I'm genuinely interested in differences between DOTS and Fastnetmon. Can you elaborate?

I presume DOTS is transport, while Fastnetmon is detection, correct?

Reply on news.ycombinator.com