[dns-operations] Storm on the DNS

Song Linjian (Davey) songlinjian at gmail.com
Tue Dec 1 09:33:01 UTC 2015

> 在 2015年12月1日,15:53,Damian Menscher <damian at google.com> 写道:
> On Mon, Nov 30, 2015 at 8:27 PM, Song Linjian (Davey) <songlinjian at gmail.com <mailto:songlinjian at gmail.com>> wrote:
> If Google or Amazon experience such kind of attack, will they “isolate” their costumers?
> When faced with a global outage, reducing the impact by achieving a partial site recovery is a good first step (true for any DDoS attack, not just DNS attacks).  It's not a great long-term plan, but I always say 90% up is better than 100% down.  Sacrificing some users buys you time (limiting PR and revenue impact of the outage), and you can then determine a strategy for mitigating the attack for the remaining affected users.
> Any significant site must plan for attacks, both in terms of capacity to absorb typical attacks and a response plan for any surprises.  Hopefully the roots will quickly release (perhaps on a restricted list) a report describing what happened, so others who may be at risk can ensure they are prepared.

Fair enough.

Davey Song(宋林健)
songlinjian at gmail.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20151201/1d12545e/attachment.html>

More information about the dns-operations mailing list