Date

Attendees

  • Albert Hankel (SURFNET)

  • Ivana Golub (CARNET)

  • Ivan (CARNET)

  • Filip Harapin (CARNET)

  • Silvia d'Ambrosio (GARR)

  • Nino Ciurleo (GARR)

  • Evangelos Spatharas (GEANT)

  • Tomáš Čejka (CESNET)

  • Václav Bartoš (CESNET)

  • David Schmitz (DFN/LRZ)

Goals

  • Introduction of idea of the WG and people (for those being new)

  • Current Problems, Experiences, Approaches, Ideas regarding DDoS D/M (detection/mitigation)

  • AOB

Discussion items

TimeItemWhoNotes
Introduction 
 Presentation by Silvia/Nino (GARR) 

https://wiki.geant.org/download/attachments/59249476/JRA2T6%20DDoS%20WG%20GARR%20proposal.pptx?api=v2

  • different types of DDoS atttacks
  • ->different methods for detection as well as mitigation exist/necessary
  • ->proposal: in general: multi-layered approach for DDoS D/M
  • -> conduct survey to find out about any experience/plans for DDOS D/M in other NRENs
 Draft Proposal of Survey for collecting info about current DDoS D/M (GARR) http://goo.gl/forms/9L15afbt9Th4vG2E3
 Discussion about enhancing the survey proposal 

enhancement proposals:

• Ivana: add question about Organization/NREN filling the survey

• Ivana: add question(s) about willingness to cooperate with other NRENs/GEANT/willingness to integrate own solution with GEANT DDoS D/M platform (in future)

• Vaclav: more clearly separate questions for detection and mitigation, or at least make text more clear that it should cover both areas; in general: really ensure each question text is clear

 

Evangelos: plan to conduct a similar survey concerning  survey DDoS D/M in GEANT (also in cooperation with JRA2-T6), regarding e.g.

  • FOD,
  • potential scrubbing center solution (e.g. A10) in GEANT: would it be useful for NRENs?

-> idea combine GEANT with the proposal from GARR

-> Actions:

• Everyone interested: edit/enhance survey if having any ideas

• Try to Find out about more secure tool to conduct that survey (Evangelos will ask Tryfon about that)

• Find out about suitable way(s) to spread survey: e.g GN showcase, VCs, APM/SIGNOC meetings,  (Evangelos will ask Tryfon about that)

 

 

Info about Planned Worshop by A10 (Evangelos)

 Workshop with A10 at Cambridge planned (about >= mid of Aug): potential deployment scenarios for A10 solution in GEANT
 ARBOR Networks survey (Evangelos) Evangelos will distribute ARBOR Networks survey via mail
 Info about hardware cards for scrubbing solution developed currently by CESNET (Tomas) 
  • CESNET: own hardware card solution (also in cooperation with flowmon) being under development:
  • 1st milestone planned this summer
  • planned to be used in CESNET for protecting universities against attacks from GEANT/NRENs/other upstream
  •  -> idea: later-on also test this inside GEANT, other NRENs
  • Tomas will continue to tell news about it
 Next VC 

short-term: use next regular T6 task VC (27.07.2016, 14:00 CEST) to discuss survey status/plans (with available people)

long-term: DS create new foodle

Action items

  • Everyone interested in the survey: edit/enhance survey if having any ideas
  • Evangelos/also anyone else: Try to Find out about more secure tool to conduct that survey (Evangelos will ask Tryfon about that)
  • Evangelos/also anyone else: Find out about suitable way(s) to spread survey (Evangelos will ask Tryfon about that)
  • Evangelos: distribute ARBOR Networks survey via mail
  • DS: make new foodle for next WG VC

2 Comments

  1. Nicole Harris

    You may find notes from the DDoS Mitigation workshop helpful: DDoS Mitigation Workshop Agenda

    1. David Schmitz

      Thank you very much!