5 ms·

What is the solution or alternative for really good DDoS protection plus some type of WAF? On AWS you can get your DNS, load balancers and EC2 instances direct

by nickjj 4y ago

What is the solution or alternative for really good DDoS protection plus some type of WAF? On AWS you can get your DNS, load balancers and EC2 instances directly protected from DDoS attacks by Amazon but it's $3,000 a month with an annual commitment ($36,000 / year) + outgoing usage rates at about 5 cents per GB with AWS Shield Advanced. Although to be fair with Cloudflare in the enterprise world you'll end up being about equal to AWS' prices, but for a smaller business coming up with 36k / year isn't feasible. That could be more than your entire business makes.

danuker 4y ago
An alternative is to sell a product which does not require constant phoning home. https://www.gnu.org/philosophy/who-does-that-server-really-serve.en.html https://www.gnu.org/philosophy/who-does-that-server-really-s...
- deleted 4y ago
  [deleted]
- DoctorOW 4y ago
  Cloudflare isn't software as a service so much as infrastructure as a service.
- xet7 4y ago
  That does not help with DDoS of website. Even if it's information only website, or all of it is FOSS, if there is DDoS, it's not possible to use that website at all during DDoS.
- xet7 4y ago
  CloudFlare also writes a lot of Open Source code https://github.com/cloudflare/ https://github.com/cloudflare/
tothrowaway 4y ago
OVH has DDoS protection, and using OpenResty as a WAF works well for me. I have a hundred(ish) lines of Lua code to handle attackers that get through OVH. I think most people could manage with a similar setup because most DDoS attacks are not very sophisticated (you're basically dealing with `ab -c 1000 -n 1000000 nickjjswebsite.com` from a bunch of hosts on DigitalOcean and Linode that some teenager hired a guy on Fiverr to execute so he wouldn't have to do his homework assignment).