4 ms·
You're really pulling a "how hard could it really be??" to DDoS prevention? You should at least be humbled by how few services can even offer DDoS protection t
by hombre_fatal 6y ago
You're really pulling a "how hard could it really be??" to DDoS prevention?
You should at least be humbled by how few services can even offer DDoS protection that works against volumetric attacks and isn't just based on null-routing. The people with skin and money in the game might know something you don't.
- cblconfederate 6y agohere's how simple it is : if (!website.underDDoS && website.requestedTimesToday[ip] <10) showCaptcha=0;
- beagle3 6y agoHow do you implement "website.underDDoS"? Through a proxy - mind you; CloudFlare makes their decision without access to your CPU or DB metrics, and don't know which page load times are legitimately slow and which aren't supposed to be.
- cblconfederate 6y agohow about "haven't had requests for the past 2 minutes". Again, i m talking about links to obscure blogs that barely anyone reads, let alone DDoSes I think another comment here may be closer to the truth, CF may only be running heuristics on the user agent
- beagle3 6y agoIf hardly anyone reads or DDoSes them, why did they go to the trouble of setting up CloudFlare? It’s free for those obscure blogs, but it’s definitely a non trivial hassle. Usually people set it up only after they experienced their first attack. I get it that you are upset Google gets to scrape them and you don’t. But bad actors really are making it difficult for everyone to just “be” on the internet.
- cblconfederate 6y agoi dont know! but they do it, everyone does it because everyone else does it. it s not unusual