3 ms·
Actually "Amazon CloudFront also has filtering capabilities to ensure that only valid TCP connections and HTTP requests are made while dropping invalid requests
by justinholmes 11y ago
Actually "Amazon CloudFront also has filtering capabilities to ensure that only valid TCP
connections and HTTP requests are made while dropping invalid requests. This takes the burden of handling invalid traffic (commonly used in UDP floods, SYN floods, and
slow reads) off your origin."
and
"By using multiple PoPs, Amazon CloudFront has the inherent ability to help mitigate
against both infrastructure and some application layer DDoS attacks by dispersing the
traffic across multiple locations."
source: https://d0.awsstatic.com/whitepapers/DDoS_White_Paper_June2015.pdf https://d0.awsstatic.com/whitepapers/DDoS_White_Paper_June20...
- nacs 11y agoAmazon Cloudfront is a CDN. A significant portion of a CDNs job is to be highly redundant and to handle DDoS. If you're comparing Amazon's offering to Linode, you should really compare to the protection Amazon offers on EC2 and similar VPS-like products.
- justinholmes 11y agoI was merely answering the question "What DDoS protection does AWS provide?". Normally you wouldn't expose a EC2 instance without putting cloudfront, elbs in front of it and locking down incoming traffic to cloudfront IPs.