Hacker News Reader

$ dig origin.github.com +short

github.map.fastly.net.

199.27.76.133

That's not really a valid test. If they're talking about dynamically rerouting traffic through the DDOS protection system, they're almost certainly using someone who starts announcing their IPs, then feeds the clean traffic back to them via a tunnel.

If that's indeed what they're using, the only way to tell would be to look at BGP announcements when they're actually under attack.

That's what I thought they were using, because of this:

"A simple Hubot command can reroute our traffic to their network which can handle terabits per second. They're able to absorb the attack, filter out the malicious traffic, and forward the legitimate traffic on to us for normal processing."

Anyone with a Renesys account can tell us who they used. Anyone want to shed some light here?

Reply on news.ycombinator.com