4 ms·
What kind of attack is cloudflare preventing when they block people from accesing static sites? DoS. The Tor network has quite a bit of bandwidth (https://metr
by jgrahamc 10y ago
What kind of attack is cloudflare preventing when they block people from accesing static sites?
DoS. The Tor network has quite a bit of bandwidth (https://metrics.torproject.org/bandwidth.html https://metrics.torproject.org/bandwidth.html) and we see DoS attacks at L7 (e.g. floods of HTTP requests) that attempt to knock sites with poor bandwidth/servers offline.
There are many, many other attacks that come through Tor.
- gcb0 10y ago> sites with poor bandwidth that point is beyond moot as we are talking exclusively about sites already fronted by CF
- jgrahamc 10y agoNope. Just because Cloudflare has a ton of bandwidth doesn't mean the origin web server does. An attacker who wants to hurt an origin server just needs to find a URI that Cloudflare doesn't cache (and that's very often /; think of any site that's dynamically generated by some CMS as an example). So, if you let traffic through to an origin without running any security it's trivial for an attacker to knock off a web server. Thus Cloudflare has to take different security measures to protect servers. And we do see L7 DoS capable of knocking origin servers down via Tor.
- gcb0 10y agono sympathy then. 1. cloud fare is a crappy cdn, and 2. if you have zero caching on a cheap server you can't expect much to begin with.