5 ms·

How do you manage to mitigate a DDOS on a public cloud? When you say GCP, Azure and AWS have the capacity to defy the ddos, what capacity are you reffering to?

How do you manage to mitigate a DDOS on a public cloud? When you say GCP, Azure and AWS have the capacity to defy the ddos, what capacity are you reffering to? Are you talking about actually scaling and serving the bogus requests? Or capacity to have enoough bandwith and firewall power to fend it off?

scurvy 8y ago
The clouds don't do any filtering or mitigation for free. They just have enough bandwidth to pass the attack through to your servers and services. You're just moving the bottleneck here, as now you need to use a cloud DDoS mitigator like Silverline, Cloudflare, prolexic. You probably would have been better off using a cloud mitigator from the start. Their pricing is competitive when you factor in all of the costs.
deleted 8y ago
[deleted]
InGodsName 8y ago
They do filter the malacious traffic if you use their loadbalancer. Loadbalancer is shared across the user accounts, so amazon has to stop the ddos. They've very effective network level ddos detector/filtering
aynsof 8y ago
I can only talk for AWS, not GCP or Azure, but there are services that can help mitigate DDOS attacks: Shield (https://aws.amazon.com/shield/ https://aws.amazon.com/shield/) is AWS's DDOS protection service. It's free and is basic protection against L3/4 attacks. Shield Advanced (same URL as above) is a big step up in price, but gives you access to 'improved protection' and a global response team. Cloudfront (https://aws.amazon.com/cloudfront https://aws.amazon.com/cloudfront) is a CDN with global edge locations. WAF (https://aws.amazon.com/waf https://aws.amazon.com/waf) is AWS's web application firewall service. It's less about DDOS and more about specific application attacks, but is part of the whole solution. For more detail, you can have a look at AWS's DDOS whitepaper: https://d0.awsstatic.com/whitepapers/Security/DDoS_White_Paper.pdf https://d0.awsstatic.com/whitepapers/Security/DDoS_White_Pap...

scurvy 8y ago

The clouds don't do any filtering or mitigation for free. They just have enough bandwidth to pass the attack through to your servers and services. You're just moving the bottleneck here, as now you need to use a cloud DDoS mitigator like Silverline, Cloudflare, prolexic. You probably would have been better off using a cloud mitigator from the start. Their pricing is competitive when you factor in all of the costs.

deleted 8y ago

[deleted]

InGodsName 8y ago

They do filter the malacious traffic if you use their loadbalancer. Loadbalancer is shared across the user accounts, so amazon has to stop the ddos. They've very effective network level ddos detector/filtering

aynsof 8y ago

I can only talk for AWS, not GCP or Azure, but there are services that can help mitigate DDOS attacks: Shield (https://aws.amazon.com/shield/ https://aws.amazon.com/shield/) is AWS's DDOS protection service. It's free and is basic protection against L3/4 attacks. Shield Advanced (same URL as above) is a big step up in price, but gives you access to 'improved protection' and a global response team. Cloudfront (https://aws.amazon.com/cloudfront https://aws.amazon.com/cloudfront) is a CDN with global edge locations. WAF (https://aws.amazon.com/waf https://aws.amazon.com/waf) is AWS's web application firewall service. It's less about DDOS and more about specific application attacks, but is part of the whole solution. For more detail, you can have a look at AWS's DDOS whitepaper: https://d0.awsstatic.com/whitepapers/Security/DDoS_White_Paper.pdf https://d0.awsstatic.com/whitepapers/Security/DDoS_White_Pap...