Hacker News Reader

What you suggest is actually the default behavior of most major carriers. Its codified here: http://tools.ietf.org/html/bcp38

That said, source address spoofing is needed for some one-way satellite internet providers.

There are also some really cool advanced load balancing tricks you can do with it. It even comes in handy (ironically) when doing DDoS mitigation.

View on HN

Is it the default behavior of major carriers in Russia/China/Africa/etc as well as in Europe/America?

My experience has been that the majority of the countries where attacks come from do not really care.

Yes, it is. But DDoS attacks to EU or the US aren't launched from China/Africa anyway.

You need relatively low capacity to start an amplification attack, so a server at some ISP which doesn't care is enough. There are some ISPs which knowingly allow this, like Ecatel in The Netherlands which is probably the most notorious example.

Reply on news.ycombinator.com