Re: [Dots] use of SDN for DDoS mitigation

On Wed, Aug 12, 2015 at 9:25 AM, Wesley Eddy <wes@mti-systems.com> wrote:
> This is not strictly within the scope of the DOTS charter, but
> because it's related to DDoS mitigation, we thought it might
> be of interest to the DOTS list.
>
> This draft was posted to the SDNRG, and discusses use of OpenFlow
> interdomain, for delegating control of ISP network filtering to
> customers:

Folk might consider looking at the prior-art in this arena...
specifically N-Layer's use of flow-spec from customers, and the fairly
well published failure modes of same.

'Let your customer traffic engineer your network!' (no, don't do that)
'Let your customer consume valuable resources on devices in your
network to which they have no ideas about limits of' (no, don't do
that)

> https://datatracker.ietf.org/doc/draft-eddy-sdnrg-customer-filters/
>
> We're eager to hear your comments, criticisms, and questions, but I
> assume that the DOTS chairs would like this to be offlist (or on the
> SDNRG list) since it is not really in-scope for DOTS and might be a
> distraction from the chartered work.
>
> --
> Wes Eddy
> MTI Systems
>
> _______________________________________________
> Dots mailing list
> Dots@ietf.org
> https://www.ietf.org/mailman/listinfo/dots