Dyn Statement on 10/21/2016 DDoS Attack
Does anyone know details on the throughput or packets per second?<p>This smells so much of gross negligence on the part of Dyn executives and all the unicorn web executive teams for single sourcing to me.<p>I present as a counterexample and encourage people to go research the architecture of Verisign.  I attended a talk by Verisign, which runs .com and .org as well as root servers.  They are a constant DDOS target.  They are necessarily a single entity of failure and appointed by ICANN to perform these services for the most common TLD in the world.  If they mess up, they will probably lose that status.  They&#x27;ve had over 16 years of uptime.<p>Every layer of the stack is dual or triple sourced.  Two server makers, two generations, two router vendors, two switch vendors, two network architectures, POP diversity, peering diversity.  Services and capacity always added in pairs. Two separate NOC and Ops teams.  FreeBSD, Linux and Solaris.  nsd, bind, and internally developed userspace on Netmap.  Code upgrade deployed in halves.  Everything is structured for at least a full halving for The Big One zero day I don&#x27;t think we&#x27;ve really seen yet.<p>They were doing 10gbps of DNS on a single commodity server 3 years ago.  This makes it easy to absorb any DDOS and gradually clamp it at the public peering points.<p>The above should be standard operations structure for any breakaway success web business.  It&#x27;s not that hard, but you have to claw the charlatans out of the management chain and put in professionals that take the career seriously.  Professionals.<p>What&#x27;s really appalling is hearing some unicorn web biz uses one cloud vendor, one service provider like Dyn.  This is absolutely trivial stuff to multi-source and has almost no effect on OpEx.<p>Last I heard from a Dyn insider was they were eliminating FreeBSD and had a brain drain a few years ago.  Overall pretty unsurprising outcome.<p>Internet reliability no more complex and certainly much cheaper than analogous critical infrastructure like electrical generation for a region.  I am constantly disappointed in this field for its lack of recognizing and installing professionals into management.  We&#x27;ve been doing Internet architecture in modern form for 30 years.  Get your shit together.