Gents, look at the following definition (shared previously)
https://www.us-cert.gov/ncas/alerts/TA13-088A
..and think about what it would take to stop an international Amplified DDoS attack:
- upstream, not contained or internal
- at an international level
Delays should be expected with various authorities handling the issue and taking action takes weeks. Obtaining a search warrant / warrant for an arrest in a foreign country as example.
Yes, lessons were learnt the hard way, but consider:
- substantial investment has been made to avoid a repeat
- skills were gained and relationships built to combat such issues at an international level
- according to the americans (the 'Open DNS Resolver Project'), 25 million of the 27 million known DNS Resolvers are unprotected. Crystal Web and their upstream partners now count under the 2 million
Each to his own, but I'm quite content to stay with Crystal Web.