The Reverse Firewall attenuates the effect of DDoS attackers, thereby preserving the ability of legitimate users to have unencumbered access to their share of the bandwidth. As DDoS attacks become more common and more damaging in their impact, being proactive and diligent in preventing DDoS attacks will be seen as minimal requirements for responsible ownership of infrastructure. The Reverse Firewall provides a viable solution here. Longer term, through the use of cooperative neighborhoods, one can accurately trace packet sources and even paths down to the LAN where they originate. Few tools exist to treat the Internet as a true global network utility where organizations can see where problems are originating, and plan around those problems.
Large neighborhoods can form the foundation for such tools.
Neighborhoods that have eliminated source forgery enable a host of new services and products such as filtering based on accurate packet sources, smarter allocation schemes for resources, and other services. While some benefits accrue to individual sites with the Cs3 DDoS defense, even greater value is gained when there are larger neighborhoods. Issues of compatibility between IP and PEIP have been analyzed in more detail , but these ideas can be refined further as users of beta implementations and reviewers provide added feedback. PEIP requires that packets carry path data. This raises issues of bandwidth and latency.