The irony is: by the time we finally are able to address egress filtering (I&#x27;d say 5-10y), attacks will have moved almost entirely to Layer 7 (like the Great Cannon attack on GitHub last year using gfw).