[LibreQoS] pulsed wave ddos attacks

Dave Taht dave.taht at gmail.com
Wed Nov 2 13:54:16 EDT 2022


Unless done "well", for some sad value of "well", FQ technologies are
very resistant to these sort of attacks, but AQM and FIFOs are not.
fq_codel is actually more resistant in some ways than cake is, because
the direct map hash has collisions.... a well formed against FQ attack
has not been demonstrated, as yet, so far as I know.

https://blog.apnic.net/2022/10/26/acc-turbo-mitigates-pulse-wave-ddos-attacks-using-programmable-switches/

Detection before it hits the customer is hard.

-- 
This song goes out to all the folk that thought Stadia would work:
https://www.linkedin.com/posts/dtaht_the-mushroom-song-activity-6981366665607352320-FXtz
Dave Täht CEO, TekLibre, LLC


More information about the LibreQoS mailing list