5 ms·
I've always wondered why github hasn't considered switching to a distributed sub domain layout to help ameliorate this problem. Surely if they spread their infr
by andrewvc 11y ago
I've always wondered why github hasn't considered switching to a distributed sub domain layout to help ameliorate this problem. Surely if they spread their infra out that would make ddos that much harder. A subdomain per user or repo should work wonderfully
- elktea 11y agoPossibly for SEO reasons.
- tvvocold 11y agoI don't think that will solve the problem.
- andrewvc 11y agoWell if x% of repos remain up that goes a long way. Right now it's all or nothing. Also if you're going to respond include a reason why you disagree
- zrm 11y agoSeparating users by subdomain leaks information. An observer can trivially see your DNS queries but not which repository you access over https or ssh. There is also little benefit in it. If the subdomains only point to the same servers then the same level of traffic will still take them all down, but if different subdomains point to different servers then it makes attacks easier because the attacker only needs enough resources to overwhelm 5% of the servers instead of all of them.