3 ms·
Cloud providers beat the DDoS drum to convince on prem companies that they're only safe on the big cloud. I used to run something like 100 blogs for our client
by throwaway189262 6y ago
Cloud providers beat the DDoS drum to convince on prem companies that they're only safe on the big cloud.
I used to run something like 100 blogs for our clients. None ever DDoSed. I surmise getting DDoSed is as rare as getting hit by lightning.
You can protect web apps against smaller attacks easily by just doing a SPA on a CDN and verifying tokens on your load balancer. If you use SHA token verification (signature based JWT verification is slow) your load balancers can probably reject traffic at line rate.
Run a pile of servers behind 40 gig interfaces and a DDoS attack will be the data center's problem. You'll saturate their line before your service goes down. Combine that with DNS or JS client side load balancing and multiple data centers will go down before your app does.
- cutemonster 6y agoHow do you do js load balancing? Trying different hostnames via js?
- throwaway189262 6y agoYeah, api1.domain.com api2.domain.com If you've got a SPA using static files hosted on a CDN it's probably the best way to load balance. Like DNS but you have control over backend selection. You can set retry interval a lot shorter than DNS. No problems with DNS caching. And you can try secondary on HTTP errors, not just connection timeout. In my experience clouds like to fail in ways that return 500/400 instead of timing out
- deleted 6y ago[deleted]
- cutemonster 6y agoThanks. If you happen to know about any related article that you like, it'd be interesting to read
- throwaway189262 6y agoSure! Uber uses it for failiver instead of load balancing but same concept https://eng.uber.com/eng-failover-handling/ https://eng.uber.com/eng-failover-handling/