3 ms·
Ask HN: Direct Server Response is a cure for DDoS. Why is it not used?
From the Google handbook:
>If user requests are small and replies are large (e.g., most HTTP requests), DSR provides tremendous savings, because only a small fraction of traffic need traverse the load balancer. Even better, DSR does not require us to keep state on the load balancer device.
See https://sre.google/sre-book/load-balancing-frontend/
Seems too good to be true. How can I implement DSR? Can I do so on EC2 / DigitalOcean, perhaps with floating ip addreses? Or, do I need physical hardware? Tried Googling, but there's very little info on how to actually implement DSR.
- throwaway888abc 4y agohttps://www.haproxy.com/blog/layer-4-load-balancing-direct-server-return-mode/ https://www.haproxy.com/blog/layer-4-load-balancing-direct-s...