From owner-freebsd-questions  Mon Nov 12 21:19:36 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from bsd.alexe.org (cc381552-a.slbch1.occa.home.com [24.16.80.251])
	by hub.freebsd.org (Postfix) with ESMTP id 251E237B405
	for <freebsd-questions@freebsd.org>; Mon, 12 Nov 2001 21:19:29 -0800 (PST)
Received: (from alex@localhost)
	by bsd.alexe.org (8.11.6/8.11.6) id fAD5MUq60430
	for freebsd-questions@freebsd.org; Mon, 12 Nov 2001 21:22:30 -0800 (PST)
	(envelope-from alex)
Date: Mon, 12 Nov 2001 21:22:14 -0800
From: Alex Obradovic <aobradovic@ballantyneinc.com>
To: freebsd-questions@freebsd.org
Subject: advice on colo w/ upstream filtering against ddos
Message-ID: <20011112212214.V41638@bsd.alexe.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
X-Editor: Vim http://www.vim.org/
X-Info: http://www.alexe.org
X-Operating-System: FreeBSD/4.4-RC (i386)
X-Uptime: 9:06PM  up 2 days,  7:59, 5 users, load averages: 0.12, 0.05, 0.01
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

I am looking for a new colo home for my FreeBSD 4.4 U1 rack (the
single space). I am currently in So Cal, but I'd consider other 
geographical locations as well. 

Basically, my site has been dossed, so I need to
find a colo that is willing to work with me on upstream filtering, and
willing to contact their providers for upstream filtering as well.

During my normal operations, my site bursts up to 128 K/sec, but when
it is dossed, the incoming traffic is 15-20 MB per second. Once it
peaked at 58 MB/sec. 

I am willing to put up another (low end) BSD machine that will just do firewall filtering
upstream if necessary. The issue is how to deal with network
congestion. Even when my BSD drops all the DDOS packets, the entire
line gets so congested that no one can access the box. 

I would appreciate any advice on this issue.

Thanks, 

Alex

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message