Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> here is no network protocol for a host to control traffic filtering on upstream providers (deny traffic from certain subnets or countries).

There is no network protocol per se, but there is commercial solutions like fortinet that can block countries iirc, but to note that it's only ip range based so it's not worth a lot



I think parent means: there no network protocol which can propagate blocking in sane manner between providers (something like bgp for firewalls)

edit: yes, you can you bgp to blockhole subnet traffic - the standard doesn't play well if you want blackhole unrelated subnets from upstream network


Unless you filter at the far end of the bottleneck you still go offline.


I'm pretty sure BGP magic will let you blackhole a whole subnet.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: