By definition, DDoS is Distributed. From my experience working on a Layer4 DDoS Protection solution, a typical case often range from 1000 to 100k flows.
> Why do people just not think twice about throwing their waste in a ditch or a river or leave their picnic at the beach?
I think there are two main reasons. First, many people don't have environmental awareness. They weren't taught. That's not to blame them, but it's just a fact. However the new generations are indeed educated on that subject. We were taught to not litter, to pick up the trash, etc. But this is where the second issue lies: when we don't follow the rules, nothing happens. No immediate consequences. Whereas in other developed countries, when people break the rules, they get fined, they get other people looking at them funny. That collective awareness helps enforce the simple rules.
Social media, mainly facebook, is absolutely huge over here. I have seen a few popular local #trashtag pictures circling around. We generally catch up with internet trends pretty quickly. I wouldn't be surprised if it made national TV. It's awesome but unfortunately I don't think it would help much in the long run.
I'm a Viet, born and raised. My country is blessed with incredible scenery, diverse and natural. The coast line is as long as the country itself ffs. Now I won't claim that I'm an avid traveler, but from my limited traveling experience (only been to Australia, Korea, Japan and Hongkong on vacation, nothing too fancy), I have never been to a place that I would rank higher in terms of beautiful, natural scenery.
However, the one thing that always caught me off guard from the few oversea trips that I've taken is that _everything is so clean over there_. That's literally the first thing that I always noticed when I get there and when I came back. Makes me feel sad, envious, and shameful.
Maybe I missed something, but the argument that was stated in that talk, "DPDK is not linux," is not very clear to me. How is "not linux" a bad thing?
I'm not saying DPDK is perfect. As an user, here are some of the most annoying things about DPDK:
- 100% CPU, even in down time. There has been works done recently in power management for DPDK but it still is quite limited.
- Debugging is difficult. Valgrind doesn't even work ootb.
- Very limited tool set compared to linux. For example no tcpdump.
- Setting up is cumbersome. Allocating hugepages must be done soon after reboot, NICs must be bound to uio,...
- Ad-hoc Layer 4-7.
That said, some of the packet processing libraries that come with DPDK is awesome. Once you get through the first few hurdles the dev experience is actually quite nice. I think combining DPDK with XDP is very promising.
My question as someone who doesn't know much about DNS beyond the most basic stuff, how would a DNS resolver know a when query is spoofed? You can maintain a query cache to filter out unsolicited (spoof) responses but what would make a query valid or invalid? I'm talking about DNS/UDP btw.
Maybe some sort of challenges? Authentication? Like DNS cookies or something.