This question already has an answer here:
- I am under DDoS. What can I do? 2 answers
During a DDOS attack, if we are finding IPs we want to block will we see better performance using a null route as opposed to iptables?
Null routing we would do something like:
ip route add blackhole <ip or range>
/sbin/iptables -A INPUT -s <ip or range> -j DR
Is there no difference? I would suspect
route would work better, but am not certain.