RE: [Full-Disclosure] Akamai

"Young called it a "large scale, international attack on Internet
infrastructure." However, there was no evidence that non-Akamai
infrastructure was affected."

http://apnews.excite.com/article/20040615/D837KIU00.html

Regards,
Brent

-----Original Message-----
From: full-disclosure-admin@lists.netsys.com
[mailto:full-disclosure-admin@lists.netsys.com]On Behalf Of james
edwards
Sent: Tuesday, June 15, 2004 4:45 PM
To: full-disclosure@lists.netsys.com
Subject: Re: [Full-Disclosure] Akamai

> I've just been told that it was a DoS. No details.

Unlikely, Akamai is an overlay network & the root content node is not
reachable.
Akamai can in real time spread web traffic through out their global network
of
servers, diluting a DoS to the point it is not significant. It is more
likely that the
complexity of the overlay network was the cause. Last week it was a DNS
issue
and it seemed much the same this week. Provided you know the IP's of the
content servers
you would find they were still up. At least that was what I as seeing.

Here is some info on Overlay Networks:
http://nms.lcs.mit.edu/ron/
http://nms.lcs.mit.edu/ron/#papers

Dr. Andersons "Mayday: Distributed Filtering for Internet Services "
is quite interesting.
http://nms.lcs.mit.edu/papers/mayday-usits2003/paper.html

--
James H. Edwards
Routing and Security Administrator
At the Santa Fe Office: Internet at Cyber Mesa
jamesh@cybermesa.com
noc@cybermesa.com
(505) 795-7101
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html