Anycast Agility: Adaptive Routing to Manage DDoS. Rizvi, A., Ceron, J., Bertholdo, L., & Heidemann, J. Technical Report arxiv:2006.14058v1, arXiv, June, 2020. ![Anycast Agility: Adaptive Routing to Manage DDoS [link]](https://bibbase.org/img/filetypes/link.svg "link")
Paper abstract bibtex IP Anycast is used for services such as DNS and Content Delivery Networks to provide the capacity to handle Distributed Denial-of-Service (DDoS) attacks. During a DDoS attack service operators may wish to redistribute traffic between anycast sites to take advantage of sites with unused or greater capacity. Depending on site traffic and attack size, operators may instead choose to concentrate attackers in a few sites to preserve operation in others. Previously service operators have taken these actions during attacks, but how to do so has not been described publicly. This paper meets that need, describing methods to use BGP to shift traffic when under DDoS that can build a ``response playbook''. Operators can use this playbook, with our new method to estimate attack size, to respond to attacks. We also explore constraints on responses seen in an anycast deployment.
@TechReport{Rizvi20a,
author = "{ASM} Rizvi and Joao Ceron and Leandro
Bertholdo and John Heidemann",
title = "Anycast Agility: Adaptive Routing to Manage {DDoS}",
institution = "arXiv",
year = 2020,
sortdate = "2020-06-24",
project = "ant, ddidd, paaddos",
jsubject = "routing",
number = "arxiv:2006.14058v1",
month = jun,
jlocation = "johnh: pafile",
keywords = "ddos, anycast, bgp, tangled, peering",
url = "https://arxiv.org/2006.14058",
pdfurl = "https://arxiv.org/pdf/2006.14058.pdf",
johnhpdfurl = "https://ant.isi.edu/%7ejohnh/PAPERS/Rizvi20a.pdf",
otherurl = "https://ant.isi.edu/~rizvi/published_papers/Rizvi20a.pdf",
myorganization = "USC/Information Sciences Institute",
copyrightholder = "authors",
abstract = "
IP Anycast is used for services such as DNS and Content Delivery Networks to provide the capacity to handle Distributed Denial-of-Service (DDoS) attacks. During a DDoS attack service operators may wish to redistribute traffic between anycast sites to take advantage of sites with unused or greater capacity. Depending on site traffic and attack size, operators may instead choose to concentrate attackers in a few sites to preserve operation in others. Previously service operators have taken these actions during attacks, but how to do so has not been described publicly. This paper meets that need, describing methods to use BGP to shift traffic when under DDoS that can build a ``response playbook''. Operators can use this playbook, with our new method to estimate attack size, to respond to attacks. We also explore constraints on responses seen in an anycast deployment.
",
}
Downloads: 0
{"_id":"eET63NyAk3HM3TYcT","bibbaseid":"rizvi-ceron-bertholdo-heidemann-anycastagilityadaptiveroutingtomanageddos-2020","author_short":["Rizvi, A.","Ceron, J.","Bertholdo, L.","Heidemann, J."],"bibdata":{"bibtype":"techreport","type":"techreport","author":[{"firstnames":["ASM"],"propositions":[],"lastnames":["Rizvi"],"suffixes":[]},{"firstnames":["Joao"],"propositions":[],"lastnames":["Ceron"],"suffixes":[]},{"firstnames":["Leandro"],"propositions":[],"lastnames":["Bertholdo"],"suffixes":[]},{"firstnames":["John"],"propositions":[],"lastnames":["Heidemann"],"suffixes":[]}],"title":"Anycast Agility: Adaptive Routing to Manage DDoS","institution":"arXiv","year":"2020","sortdate":"2020-06-24","project":"ant, ddidd, paaddos","jsubject":"routing","number":"arxiv:2006.14058v1","month":"June","jlocation":"johnh: pafile","keywords":"ddos, anycast, bgp, tangled, peering","url":"https://arxiv.org/2006.14058","pdfurl":"https://arxiv.org/pdf/2006.14058.pdf","johnhpdfurl":"https://ant.isi.edu/%7ejohnh/PAPERS/Rizvi20a.pdf","otherurl":"https://ant.isi.edu/ rizvi/published_papers/Rizvi20a.pdf","myorganization":"USC/Information Sciences Institute","copyrightholder":"authors","abstract":"IP Anycast is used for services such as DNS and Content Delivery Networks to provide the capacity to handle Distributed Denial-of-Service (DDoS) attacks. During a DDoS attack service operators may wish to redistribute traffic between anycast sites to take advantage of sites with unused or greater capacity. Depending on site traffic and attack size, operators may instead choose to concentrate attackers in a few sites to preserve operation in others. Previously service operators have taken these actions during attacks, but how to do so has not been described publicly. This paper meets that need, describing methods to use BGP to shift traffic when under DDoS that can build a ``response playbook''. Operators can use this playbook, with our new method to estimate attack size, to respond to attacks. We also explore constraints on responses seen in an anycast deployment. ","bibtex":"@TechReport{Rizvi20a,\n\tauthor = \t\"{ASM} Rizvi and Joao Ceron and Leandro\n Bertholdo and John Heidemann\",\n\ttitle = \t\"Anycast Agility: Adaptive Routing to Manage {DDoS}\",\n\tinstitution = \t\"arXiv\",\n\tyear = \t\t2020,\n\tsortdate = \t\t\"2020-06-24\", \n\tproject = \"ant, ddidd, paaddos\",\n\tjsubject = \"routing\",\n\tnumber =\t\"arxiv:2006.14058v1\",\n\tmonth =\t\tjun,\n\tjlocation =\t\"johnh: pafile\",\n\tkeywords =\t\"ddos, anycast, bgp, tangled, peering\",\n\turl =\t\"https://arxiv.org/2006.14058\",\n\tpdfurl =\t\"https://arxiv.org/pdf/2006.14058.pdf\",\n\tjohnhpdfurl =\t\"https://ant.isi.edu/%7ejohnh/PAPERS/Rizvi20a.pdf\",\n\totherurl =\t\t\"https://ant.isi.edu/~rizvi/published_papers/Rizvi20a.pdf\",\n\tmyorganization =\t\"USC/Information Sciences Institute\",\n\tcopyrightholder = \"authors\",\n\tabstract = \"\nIP Anycast is used for services such as DNS and Content Delivery Networks to provide the capacity to handle Distributed Denial-of-Service (DDoS) attacks. During a DDoS attack service operators may wish to redistribute traffic between anycast sites to take advantage of sites with unused or greater capacity. Depending on site traffic and attack size, operators may instead choose to concentrate attackers in a few sites to preserve operation in others. Previously service operators have taken these actions during attacks, but how to do so has not been described publicly. This paper meets that need, describing methods to use BGP to shift traffic when under DDoS that can build a ``response playbook''. Operators can use this playbook, with our new method to estimate attack size, to respond to attacks. We also explore constraints on responses seen in an anycast deployment.\n\",\n}\n\n\n","author_short":["Rizvi, A.","Ceron, J.","Bertholdo, L.","Heidemann, J."],"bibbaseid":"rizvi-ceron-bertholdo-heidemann-anycastagilityadaptiveroutingtomanageddos-2020","role":"author","urls":{"Paper":"https://arxiv.org/2006.14058"},"keyword":["ddos","anycast","bgp","tangled","peering"],"metadata":{"authorlinks":{}}},"bibtype":"techreport","biburl":"https://bibbase.org/f/dHevizJoWEhWowz8q/johnh-2023-2.bib","dataSources":["YLyu3mj3xsBeoqiHK","fLZcDgNSoSuatv6aX","fxEParwu2ZfurScPY","7nuQvtHTqKrLmgu99"],"keywords":["ddos","anycast","bgp","tangled","peering"],"search_terms":["anycast","agility","adaptive","routing","manage","ddos","rizvi","ceron","bertholdo","heidemann"],"title":"Anycast Agility: Adaptive Routing to Manage DDoS","year":2020}