Guys, consider pinging, this might be somewhat esoteric for some users, but it has huge (”YUUUGE!”) potential consequences for all of us.
Interesting timing with the meeting coming up next week. The message is: the only viable defense against a DDoS attack is cooperation and to cut it off before it can get to the intended target. Once your network interfaces are flooded with traffic, there’s not much you can do, the wire/fiber’s bandwidth is full. The only real way to prevent/stop them is distributed just like the attack. Prevent or limit the amount of traffic you’re willing to forward. The anti-spoofing helps because it means you can effectively filter out the bots doing the attack.