<html><head><meta http-equiv="Content-Type" content="text/html charset=gb2312"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">在 2015年12月1日，15:53，Damian Menscher <<a href="mailto:damian@google.com" class="">damian@google.com</a>> 写道：</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div class="gmail_extra"><div class="gmail_quote">On Mon, Nov 30, 2015 at 8:27 PM, Song Linjian (Davey) <span dir="ltr" class=""><<a href="mailto:songlinjian@gmail.com" target="_blank" class="">songlinjian@gmail.com</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">If Google or Amazon experience such kind of attack, will they “isolate” their costumers?</blockquote></div><br class="">When faced with a global outage, reducing the impact by achieving a partial site recovery is a good first step (true for any DDoS attack, not just DNS attacks). It's not a great long-term plan, but I always say 90% up is better than 100% down. Sacrificing some users buys you time (limiting PR and revenue impact of the outage), and you can then determine a strategy for mitigating the attack for the remaining affected users.</div><div class="gmail_extra"><br class=""></div><div class="gmail_extra">Any significant site must plan for attacks, both in terms of capacity to absorb typical attacks and a response plan for any surprises. Hopefully the roots will quickly release (perhaps on a restricted list) a report describing what happened, so others who may be at risk can ensure they are prepared.</div><div class="gmail_extra"><br class=""></div></div></div></blockquote><div><br class=""></div>Fair enough.<br class=""></div><br class=""><div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">------------------------------</div><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Davey Song(宋林健)<br class="">BII Lab<br class=""><a href="mailto:songlinjian@gmail.com" class="">songlinjian@gmail.com</a><br class=""><br class=""></div></div>
</div>
<br class=""></body></html>