4 ms·
A lot of CloudFlare is just iptables Sure they have bigger "tubes" as well https://blog.cloudflare.com/how-we-built-spectrum/ https://blog.cloudflare.com/how-
by mustardo 7y ago
A lot of CloudFlare is just iptables
Sure they have bigger "tubes" as well
https://blog.cloudflare.com/how-we-built-spectrum/ https://blog.cloudflare.com/how-we-built-spectrum/
https://blog.cloudflare.com/how-to-drop-10-million-packets/ https://blog.cloudflare.com/how-to-drop-10-million-packets/
- lossolo 7y agoI think you overestimate what iptables can do and for what they are used today. Most of the DDoS filtering is done using XDP, BPF, not iptables. Articles you linked contradict your thesis. In first article they write there about iptables but they use XDP most of the time because it's a better/more efficient solution. In second article they are using iptables for routing, not preventing DDoS.
- ycgeu 7y agoBigger tubes is 99.9% of CloudFlare, that's why you can't build a competing business.
- acd 7y agoYou can you build competing Cloudflare business if you are a tier one ISP. Other AntiDDos services exist like for example Akamai and Arbor networks. https://www.esecurityplanet.com/products/top-ddos-vendors.html https://www.esecurityplanet.com/products/top-ddos-vendors.ht...
- acd 7y agoCloudflare also used to use Apache mod_security. "Cloudflare WAF supports the OWASP ModSecurity Core Rule Set by default" https://www.cloudflare.com/waf/ https://www.cloudflare.com/waf/