4 ms·
This is such a great idea! After reading the PR, there is one thing that is not clear to me: how can you ensure an swarm of bad servers are not trying to DDOS
by fermuch 8y ago
This is such a great idea!
After reading the PR, there is one thing that is not clear to me: how can you ensure an swarm of bad servers are not trying to DDOS a remote server?
If a bunch of servers create fake users, and some fake super users who everyone follows, then the act of moving those super accounts is O(3) jobs for every follower the super user has (as it says in the PR)
Wouldn't this attack be easily exploitable? Are there any other tools to prevent these kinds of attacks? (apart from baning server domains)
- yorwba 8y agoAlthough the receiving server needs to run (2n+m) jobs to migrate a super account with n users on m servers (m <= n), which is 3n in the worst case, the originating server also needs to run (n+m) jobs, for a maximum amplification factor of 2 (when m=1). If servers really want to DDoS each other, they can probably find a better method.