4 ms·
One of the way to fight DDOS could be to allow those who are under attack send traffic to the origin of the attack. So for example, if you receive 1 Mbps of tra
by codedokode 9y ago
One of the way to fight DDOS could be to allow those who are under attack send traffic to the origin of the attack. So for example, if you receive 1 Mbps of traffic from some IP, you can send 100 Mbps back.
If the origin is an infected computer, then it will most likely go off the network, and will stop participating in the attack. If the origin is a data center, then they will lose connetivity and it will motivate them to cure infected servers.
- landryraccoon 9y agoWhat do you do if the attacker spoofs the IP address of an innocent third party? Now you send them 100 Mbps, and they retaliate by sending you 10 GB? All this does is amplify the DDOS attack. You're making it easier to DDOS yourself, not harder.
- lima 9y agoThird party isn't innocent in this case. Not that I'd condone any sort of vigilante justice, but leaving memcached servers open and ignore abuse messages is reckless.
- stordoff 9y agoI feel like this could easily lead to escalating counter-counter-...counter-attacks, giving a globally reduced service.
- blackflame7000 9y agoHow do you send data back when you're network is flooding. Most network equipment grinds to a halt under extreme load