BROCADE IP PRIMER

Chapter 15: Server Load Balancing (SLB)• 12×1 Gbps fiber (SFP)• 4×10 Gbps fiber (XFP)For more specific information on available models and specifications, pleasesee Brocade's web site (http://www.brocade.com/).Attack ProtectionWith all that processing power, and the fact that the ServerIron is analyzingthrough Layer 7 of each packet, it seemed only natural to include some protectionagainst common attacks. The attacks we're going to cover here are basicDistributed Denial of Service (DDoS) attacks. These are attacks that aredesigned to make some remote service or function (often on the Internet)inaccessible.Smurf Attack (ICMP)This attack was called “smurf” after the program that was written to initiatethe attack. The attacker chooses a target (typically a single IP address). Theattack then sends a ping with its source IP address spoofed as the address ofthe target. This ping would be to a broadcast address of, preferably, a largenetwork. Potentially hundreds of machines would receive the ping, and sendtheir replies to the hapless target (as the original ping “appeared” to comefrom it).328 Brocade IP Primer