DDoS Mitigation Trial via HKIX Route Servers by Supporting IPv4 Special Host Route Announcements for Black-holing
With immediate effect, HKIX route servers support IPv4 special host route announcements (i.e. /32’s) with BGP community 4635:666 for DDoS Mitigation Trial. If HKIX participants want to participate, please send email to firstname.lastname@example.org for implementation details.
In short, trial participants should at least accept the /32’s with BGP community 4635:666 from HKIX route servers and then do black-holing for traffic destined to those IP addresses. Trial participants can also announce /32’s which are under their managed address blocks with BGP community 4635:666 to signal other trial participants to do black-holing when under DDoS attacks.
Benefits of participating:
- Hosts which are not DDoS targets will be less affected by the DDoS attacks.
- All participating networks will save some bandwidth of their HKIX connections during the DDoS attack period.
Possible impacts to DDoS Victims:
- The relevant hosts will be unreachable from those participating networks while the special /32 route announcements are in effect.
If the trial is considered successful, the set-up will be made permanent and this will be one of our standard services to all HKIX participants.
Again, if HKIX participants want to participate, please send email to email@example.com for implementation details.
We look forward to working with all of you to do better DDoS mitigation over HKIX.