[dns-operations] Storm on the DNS

[Song Linjian (Davey)]

> 在 2015年12月1日，15:53，Damian Menscher <damian at google.com> 写道：
> 
> On Mon, Nov 30, 2015 at 8:27 PM, Song Linjian (Davey) <songlinjian at gmail.com <mailto:songlinjian at gmail.com>> wrote:
> If Google or Amazon experience such kind of attack, will they “isolate” their costumers?
> 
> When faced with a global outage, reducing the impact by achieving a partial site recovery is a good first step (true for any DDoS attack, not just DNS attacks).  It's not a great long-term plan, but I always say 90% up is better than 100% down.  Sacrificing some users buys you time (limiting PR and revenue impact of the outage), and you can then determine a strategy for mitigating the attack for the remaining affected users.
> 
> Any significant site must plan for attacks, both in terms of capacity to absorb typical attacks and a response plan for any surprises.  Hopefully the roots will quickly release (perhaps on a restricted list) a report describing what happened, so others who may be at risk can ensure they are prepared.
> 

Fair enough.

------------------------------
Davey Song(宋林健)
BII Lab
songlinjian at gmail.com


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20151201/1d12545e/attachment.html>