4 ms·
Something missing from the cost calculation in this article is the cost of bandwidth used for each VM. The VM itself may be low cost but at 100Mbps you will use
by carson 16y ago
Something missing from the cost calculation in this article is the cost of bandwidth used for each VM. The VM itself may be low cost but at 100Mbps you will use about 1TB of bandwidth a day. You would need to select your VM provider with that in mind. A sustained attack could end up being fairly expensive.
- tptacek 16y agoA good point, but I think part of the implied logic here is that if your defenses work, attackers will give up early.
- conover 16y agoWhy would an attacker give up? The site may stay online but you are still having to pay thousands of dollars+ in bandwidth costs. It seems like a win-win for the attacker.
- tptacek 16y agoBecause they can't see a site paying thousands of dollars, and they can see a site going down, and they're going to invest their attention in things they can see. If they were thinking rationally about what they were doing, they'd (a) be demanding money to let up, and (b) breezing right past DNS-based defenses like this.
- JoachimSchipper 16y agoThe attacker has limited resources too, if only because they could be attacking other hosts that drop more easily.