Re: [v6ops] [Fwd: I-D Action: draft-carpenter-v6ops-icp-guidance-03.txt]

[Hui Deng <[e-mail]>]

Hi Brian

I am fine to keep it a seperate topic, maybe write an guidance document for
Prevention from DDOS in IPv6 sounds reasonable

-Hui

2012/3/13 Brian E Carpenter <[e-mail]>

> Hi,
>
> On 2012-03-12 17:00, Hui Deng wrote:
> ...
> >>> 4) ICP need to fully understand how to avoid DDOS when they launch the
> >>> IPv6, otherwise they will always need NAT solution
> >> Can you explain that please?
> >>
> > this expecting that this document could explain how to avoid DDOS in
> > detail, otherwise, they have to deploy special NAT to handle this by
> > configure some policy over there.
>
> I am very confused about how a NAT algorithm can be configured to detect
> a DDOS attack. I can certainly understand that a box that contains a NAT
> algorithm might also contain a DDOS detection algorithm, but that is
> a separate question.
>
> Maybe what we need is a specific document on detecting and defeating DDOS
> attacks in IPv6? That sounds like a major topic in itself, and it isn't
> only for ICPs.
>
>   Brian
>