AS203446(DDoS Mitigation, Colocation & IP-Transit) + SPECIAL Colocation DEAL

dataforest

and in the end it's no use having five carriers with 100G each, if a stupid attack comes in and the link is congested, you'd be the first to complain ;-)

jh_aurologic

@PHP_Friends said:
and in the end it's no use having five carriers with 100G each, if a stupid attack comes in and the link is congested, you'd be the first to complain ;-)

With 100G, no - wont make any sense. With multiple 100G's and proper Tier-1 community usage, you're fine with five carriers, ingress traffic steering is key especially if you have uneven sized links :-)

Vexelia

@jh_aurologic said:

@packetnext said:
Why should we buy from you instead of zet and combahton, of which at least the latter is a company with a history?

combahton is gone since some time, glad to have changed the name.

I'd say @AS203446 provides more customized solution than what we do, thats potentially their big advantage - the larger you get, the slower you become, beside of that we dont just do DDoS-Protection, instead quite a few more things like running our DC here, smaller in my mind is nothing bad

You could not have said it better, well done. I agree that Fiedler can provide more customized solutions compared to Aurologic, and provides a entirely different service as a result.

SplitIce

@AS203446 said:

Specifying a "capacity"(How much the mitigation can handle) makes no sense.

I would agree with this statement. Don't know much about these guys but I tend to agree with the sentiment of being conservative to quote capacity.

We for example advertise a 100Gbps guaruntee on over 4Tbps of network capacity because stating a guaruntee is something that will often be used against you and very hard to really provide. Generally we would assert that a guaruntee should not exceed the max % utilization (minus clean usage) of your smallest link (IX / transit) or filtering capacity (whichever is lower).

So if you have 200G links per transit (2x100) then your capacity is 100G if you intend to nullroute at 90%, and have 40% regular utilization and >= 100G mitigation. Of course thats not your capacity either, just the worst case (often what customers will think of as "capacity") and the number that will be used against you should a nullroute ever be necessary.

AS203446

@SplitIce said: We for example advertise a 100Gbps guaruntee on over 4Tbps of network capacity because stating a guaruntee is something that will often be used against you and very hard to really provide.

Exactly, if you tell everyone that you have 2,3,4,5Tbps capacity, they expect it to be correct and in case of an attack than has an impact on your infrastructure, you'll receive complaints.

kait

@AS203446 Is your 400G capacity 40G 95% 400G or 100G 95% 400G or whatever or is it 400G flat with peaks available? I always wonder what the standard is to advertise your capacity.

AS203446

@kait said:
@AS203446 Is your 400G capacity 40G 95% 400G or 100G 95% 400G or whatever or is it 400G flat with peaks available? I always wonder what the standard is to advertise your capacity.

The capacity is just counting all uplinks together

kait

@AS203446 said: The capacity is just counting all uplinks together

So a 1G on 800G 95% is still 800G capacity?

AS203446

@kait said:

@AS203446 said: The capacity is just counting all uplinks together

So a 1G on 800G 95% is still 800G capacity?

You are talking about the commitment, well, no one will sell you 1G commit on an 800G physical port. 10% are common. However, you are allowed to have peaks up to the max. port capacity in most contracts, which would be 800G in your example.

Most attacks are short peaks, and even if they last longer, you are probably still within your commitment at the end of the month. With 95/5, you have some hours per month where you can basically use the full port capacity without having overcommitment at the end of the month.

kait

@AS203446 said: You are talking about the commitment, well, no one will sell you 1G commit on an 800G physical port. 10% are common. However, you are allowed to have peaks up to the max. port capacity in most contracts, which would be 800G in your example.

Most attacks are short peaks, and even if they last longer, you are probably still within your commitment at the end of the month. With 95/5, you have some hours per month where you can basically use the full port capacity without having overcommitment at the end of the month.

Yeah, it was just an extreme example.

AS203446

@kait said:

@AS203446 said: You are talking about the commitment, well, no one will sell you 1G commit on an 800G physical port. 10% are common. However, you are allowed to have peaks up to the max. port capacity in most contracts, which would be 800G in your example.

Most attacks are short peaks, and even if they last longer, you are probably still within your commitment at the end of the month. With 95/5, you have some hours per month where you can basically use the full port capacity without having overcommitment at the end of the month.

Yeah, it was just an extreme example.

Yes, so as I said, capacity is a flexible term.

AS203446

Just FYI:

We recently optimized our mitigation for TeamSpeak 3 services, which are still widely used in Europe. Feel free to ask if you have any questions.