To:
Randy Bush <randy@psg.com>
Cc:
Patrik Fältström <paf@cisco.com>, dnsop@cafax.se
From:
Brad Knowles <brad.knowles@skynet.be>
Date:
Mon, 4 Nov 2002 18:49:42 -0600
In-Reply-To:
<E188j8y-000Bdu-00@rip.psg.com>
Sender:
owner-dnsop@cafax.se
Subject:
Re: DoS and anycast
At 7:28 AM -0800 2002/11/04, Randy Bush wrote:
> when it is a dns problem, their dns folk. do remember that this
> happens today and has been happening for many years. isps have
> been using anycast dns for many years.
Again, I'd like to see evidence of this. I can verify practices
at a few large ISPs, and see if they've been doing it or not.
Certainly, the large ISPs I am personally familiar with would never
consider doing this -- indeed, the concept almost certainly would not
even occur to them.
If they have been doing this sort of thing, then there is a much,
much more serious problem that I think we need to deal with.
Note that I'm talking about true anycast, not route hijacking or
transparent proxying.
--
Brad Knowles, <brad.knowles@skynet.be>
"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-Benjamin Franklin, Historical Review of Pennsylvania.
GCS/IT d+(-) s:+(++)>: a C++(+++)$ UMBSHI++++$ P+>++ L+ !E W+++(--) N+ !w---
O- M++ V PS++(+++) PE- Y+(++) PGP>+++ t+(+++) 5++(+++) X++(+++) R+(+++)
tv+(+++) b+(++++) DI+(++++) D+(++) G+(++++) e++>++++ h--- r---(+++)* z(+++)
#----------------------------------------------------------------------
# To unsubscribe, send a message to <dnsop-request@cafax.se>.