Subject: Re: [Dots] New Version Notification for draft-chen-dots-attack-informations-03.txt

From: "Meiling Chen" <[email-masked]>
Date: Thu, 22 Aug 2019 19:11:38 +0800

Hi all,

This version has made big changes, mainly:
(1) DDoS attacks are classified by Bandwidth consuming attack and Host resource consuming attack;
(2) Add parameters to mitigation request and response for Bandwidth consuming attack and Host resource consuming attack;
(3) Mitigation request parameters for Bandwidth consuming attack include 8: 
Attack_Target_IP,
Alarm_Begin_time,
Direction, 
Target_Attack_Type,
Target_Attack_Type_Threshold,
Attack_Target_IP_Peak,
Attack_Source_IP_Num, 
Attack_Bandwidth; 
Mitigation response parameters include 8 :  
Attack_Target_IP,
Alarm_End_time,
Target_Attack_Type,
Total_Traffic,
Residual_Traffic,
Attack_Traffic, 
Attack_Target_IP_Peak,
Attack_Source_IP_Num
(4) Mitigation request parameters for Host resource consuming attack include 5:
Attack_Target_IP,
Attack_Target_Packet_Rate,
Alarm_Begin_Time,
Direction,
Target_Attack_Type;
 Mitigation Response parameters 5:
Attack_Target_IP,
Alarm_End_time,
Target_Attack_Type,  
Attack_Source_IP,
Attack_Target_Packet_Rate
(5)When Host Resource consuming DDoS attack occurs we recommend using Attack_Target_Packet_Rate to detect attack.

Comments and questions are more than welcome.

Best Regards,
Meiling Chen 
From: internet-drafts
Date: 2019-08-22 18:50
To: Li Su; chenmeiling; Jin Peng; Meiling Chen
Subject: New Version Notification for draft-chen-dots-attack-informations-03.txt
 
A new version of I-D, draft-chen-dots-attack-informations-03.txt
has been successfully submitted by Meiling Chen and posted to the
IETF repository.
 
Name: draft-chen-dots-attack-informations
Revision: 03
Title: DOTS client carry ddos attack informations in signal channel
Document date: 2019-08-22
Group: Individual Submission
Pages: 20
URL:            https://www.ietf.org/internet-drafts/draft-chen-dots-attack-informations-03.txt
Status:         https://datatracker.ietf.org/doc/draft-chen-dots-attack-informations/
Htmlized:       https://tools.ietf.org/html/draft-chen-dots-attack-informations-03
Htmlized:       https://datatracker.ietf.org/doc/html/draft-chen-dots-attack-informations
Diff:           https://www.ietf.org/rfcdiff?url2=draft-chen-dots-attack-informations-03
 
Abstract:
   This document describes DDoS attack information which can be obtained
   by DOTS client when the enterprise suspects it is under DDoS attack,
   these informations will be send from DOTS client to DOTS server in
   mitigation request using Signal channel or Data channel.

 
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
 
The IETF Secretariat