Questions tagged [ddos]

For questions about DDoS denial-of-service attack (DoS attack), which can make a machine or network resource unavailable to its users by temporarily or indefinitely disrupting services of a host connected to the Internet. Use this tag in relation to troubleshooting DDoS attacks.

Filter by
Sorted by
Tagged with
1 vote
1 answer
54 views

Cisco BGP RTBH in EVPN fabric

I have Cisco basic EVPN fabric configuration in DC with two spine and couple of leafs using OSFP+iBGP for underlay fabric. My border leaf connected to my ISP using Vrf CUST. I want to configure RTBH ...
Satish's user avatar
  • 4,379
0 votes
1 answer
116 views

a highly sophisticated and persistent DDoS attack

i had ddos attack i used wireshark to analyzes packets on entery point (ethernet interface) i found packets incoming on: mac protocol=800 (ip) protocol=17 (udp) src-address=(diffirent ips from the ...
Abd Elkarem Rajab's user avatar
0 votes
1 answer
701 views

What are unusual ports?

I found the unusual ports at 2 places, maybe one has got the idea from the other without acknowledging it. Hi, I am trying to understand mismatch port application. I am reading the article: https://...
user2994783's user avatar
0 votes
1 answer
98 views

Can QUIC prevent DNS/NTP amplification for DDOS

According to Cloudflare's article dedicated to QUIC - subtitle Deflecting Reflection implies that QUIC may prevent tampering IP packets. Doest it meat that QUIC may kill DNS/NTP amplification for DDOS ...
pacman's user avatar
  • 115
2 votes
2 answers
83 views

Why does IKEv2 forbid dynamic address updates for hosts behind NAT?

In RFC7296, Section 2.23 it is written: There are cases where a NAT box decides to remove mappings that are still alive (for example, the keepalive interval is too long, or the NAT box is rebooted). ....
Kentzo's user avatar
  • 123
0 votes
1 answer
59 views

router-alert feature in DDoS prevention - MX series

I'm reading DDoS Prevention in MX series - 2nd. As mentioned in book "you can also configure whether an individual policer type should bypass that group’s aggregate policer" => I don't ...
Unstoppableee's user avatar
0 votes
1 answer
96 views

Are routers doing NATP possibly run out of ports?

NATP helps each connection on the client device gain a "temporary identity" on the internet, by maintaining a one-to-one relationship between its local ip-port to a WAN ip-port. The binding ...
Nathan Hardy's user avatar
1 vote
1 answer
98 views

How to Mitigate DoS by Bindings/Transport Address Exhaustion in NAT64?

Let's say a NAT64 Router only has 1 IPv4 address for bindings, meaning the NAT64 router has a roughly 65535 IPv4 transport addresses. A malicious attacker can then exhaust the entire IPv4 transport ...
maximillian1's user avatar
4 votes
2 answers
1k views

RE Protection vs DDOS Protection in Juniper MX series routers

Hi Everyone, Need to know the clear differences between RE protection and DDOS protection in Juniper MX. Both are used to save routing engine from depletion of resources. As mentioned in Juniper MX ...
Nabeel's user avatar
  • 1,120
0 votes
1 answer
111 views

Can a random person flood my IP address with excessive amount of garbage packets?

After studying networking for some time, I just realize that the Layer 3 and Layer 2 don't care about the content of the packets they forward. All they care is the header, and further processing of ...
Livy's user avatar
  • 423
0 votes
1 answer
84 views

Does CSMA/CA have anti-DoS measures, and if yes which?

So as far as i understand, you can deny other devices access to a WiFi by flooding the channel they are on with data, so that the channel is never "idle", thus preventing other devices from using it - ...
Flying Thunder's user avatar
0 votes
1 answer
120 views

Can I be DDoS-ed without any listening/responding IP address (UDP/TCP/ICMP)?

I'm asking this question because all if not most literature out there indicates that there is a listening or responding entity that is involved in an attack. If I was behind a router that does not ...
MFT's user avatar
  • 206
3 votes
2 answers
130 views

Stop Memcrashed amplification DDoS attack

DDoS is essential part of my life so i am back with more question, Yes we started getting memcache based UDP amplification attacks, all source ports are 11211 coming from many random source IPs, we ...
Satish's user avatar
  • 4,379
1 vote
2 answers
531 views

Is a networking loop considered a DoS attack?

Is a networking loop considered a DoS attack? I watched this tutorial and at 1:20: The author says that a network loop, could be a DoS in a network?
244boy's user avatar
  • 1,767
2 votes
1 answer
337 views

Can i implement BGP flowspec

This question is for general information about BGP flowspec, Can i implement BGP flowspec to stop DDoS? RTBH isn't what we want because it blackholing all traffic, we want RTBH at Layer 4 level where ...
Satish's user avatar
  • 4,379