- Joined
- Dec 16, 2019
Welcome to learning that a DDoS is when the CEO can’t see his picture on the site, and it is mitigated when you null route every single IP in the world except his.If you are using Akamai to protect websites targeted to other countries than the US, you have a need for L7 protection on Akamai. Their data quality outside of the US is shit. They marked entire networks of big European ISP's which are using CGNAT or dynamic IP's as unsafe and are blocking all traffic if you just use their IP reputation or other behavior based mitigation.
They marked at least two big eyeball networks in the Netherlands and all three of the mobile carriers who use CGNAT as unreliable with a terrible reputation score, at least one Dutch bank was blocking half of their customers when they just flipped on L2/L3 protection on Akamai. I don't know why, as no other "security" provider marks them as unreliable and they respond to abuse complaints in minutes.
Congratulations you can be a high paid IT admin at basically any non-Internet company ever now.