[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
DNS hardening, was Re: Dan Kaminsky
On Thu, Aug 06, 2009 at 03:16:25PM +0000, Paul Vixie wrote:
> > ...: "Do loadbalancers, or loadbalanced deployments, deal with this
> > properly?" (loadbalancers like F5, citrix, radware, cisco, etc...)
>
> as far as i know, no loadbalancer understands SCTP today. if they can be
> made to pass SCTP through unmodified and only do their enhanced L4 on UDP
> and TCP as they do now, all will be well. if not then a loadbalancer
> upgrade or removal will be nec'y for anyone who wants to deploy SCTP.
F5 BIG-IP 10.0 has support for load balancing SCTP. I have not tested
or implemented it. I do not know what feature parity exists with
other protocols. But at least it's documented and supported.
--
Ross Vandegrift
ross at kallisti.us
"If the fight gets hot, the songs get hotter. If the going gets tough,
the songs get tougher."
--Woody Guthrie
- References:
- DNS hardening, was Re: Dan Kaminsky
- From: johnl at iecc.com (John Levine)
- DNS hardening, was Re: Dan Kaminsky
- From: dotis at mail-abuse.org (Douglas Otis)
- DNS hardening, was Re: Dan Kaminsky
- From: rdobbins at arbor.net (Roland Dobbins)
- DNS hardening, was Re: Dan Kaminsky
- From: dotis at mail-abuse.org (Douglas Otis)
- DNS hardening, was Re: Dan Kaminsky
- From: morrowc.lists at gmail.com (Christopher Morrow)
- DNS hardening, was Re: Dan Kaminsky
- From: dotis at mail-abuse.org (Douglas Otis)
- DNS hardening, was Re: Dan Kaminsky
- From: morrowc.lists at gmail.com (Christopher Morrow)
- DNS hardening, was Re: Dan Kaminsky
- From: vixie at isc.org (Paul Vixie)
- DNS hardening, was Re: Dan Kaminsky
- From: morrowc.lists at gmail.com (Christopher Morrow)
- DNS hardening, was Re: Dan Kaminsky
- From: vixie at isc.org (Paul Vixie)