‹ BackHN Continuity

Thread

Show HN: I created a BGP-based blackhole system that you can set up in minutes

7 points · 10 comments · jkalbfeld

  1. 112233 · · focus · HN ↗
    Hopefully upstream peers will use RPKI properly. It would be sad if this actually worked.
    1. BrianGragg · · focus · HN ↗
      I don't think RPKI will do anything to stop threats or DDOS attacks that happen currently. It should stop rogue route updates though.
      1. 112233 · · focus · HN ↗
        It will, however, stop projects like these from blacholing IP ranges belonging to others
        1. jkalbfeld · · focus · HN ↗
          It's not blackholing anything for anyone other than the subscriber, so this doesn't cause a block for anyone who isn't participating
    2. jkalbfeld · · focus · HN ↗
      RPKI is great, and I use it for everything except for two /24's that I got pre-ARIN. However, RPKI won't help with the situation where some kind of compromised host is worming its way through the internet running nmap against everything. Most of the IP addresses showing up in our dragnet are in fact announced by the very ISPs that own them. Most of these do not appear to be bogons.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.