4 ms·
DDoS is a product of an inherent weakness of the internet infrastructure, namely BGP. Cloudflare "solves" this by acting as a middleman, and charging for their
by cowtools 4y ago
DDoS is a product of an inherent weakness of the internet infrastructure, namely BGP. Cloudflare "solves" this by acting as a middleman, and charging for their service.
I don't know if I would describe a DDoS attack as "digital terrorism", but it is annoying and hard to stop on an individual level because of the design of the internet.
- greyface- 4y ago> namely BGP DDoS attacks would still occur if we used a routing protocol other than BGP. It's not created by BGP, it's created by the fact that the Internet is end-to-end oversubscribed.
- cowtools 4y agoThe weakness in the internet that allows for DDoS is that you can't tell your peers to filter incoming traffic on your behalf, so you need to discriminate on the edge. The attacker still gets to eat up your bandwidth and CPU time.
- greyface- 4y agoBGP absolutely does allow you to tell your peers to filter traffic before passing it to you. https://www.rfc-editor.org/rfc/rfc7999.html https://www.rfc-editor.org/rfc/rfc7999.html
- cowtools 4y agoThis is just IP-based filtering, which is useless as the attacker can purchase more IP space. What you need is something like a whitelist-by-public-key or hashcash or something.
- ancarda 4y agoIsn't the issue more with how we implemented IP than BGP? AFAIK, DDoS attacks would be far less effective if every ISP implemented BCP 38.
- deleted 4y ago[deleted]
- fomine3 4y agoIt's a problem that stop on an corporate level is also hard. Ultimately CDN is the only mitigation.