3 ms·

I'm assuming that eBPF would be a potent tool for dealing with this, and it looks like CloudFlare agrees: https://blog.cloudflare.com/l4drop-xdp-ebpf-based-ddos

• viraptor 5y ago
  Software solutions at the receiving end are meaningless for stateless DDoS. It doesn't matter how quickly you drop/filter packets if your physical connection cannot receive any more of them. You need to ensure the traffic never saturates your connection in the first place to avoid issues - this can only be done on the sending end or somewhere on the path to you.
  • pstuart 5y ago
    Good to know
• kortilla 5y ago
  Ebpf only matters if you have the bandwidth to receive it in the first place.