3 ms·

Can confirm the impact appears total for the Azure portal; Microsoft sells DDoS protection as part of Front Door and other Azure services. Do they not use it th

Can confirm the impact appears total for the Azure portal; Microsoft sells DDoS protection as part of Front Door and other Azure services. Do they not use it themselves?

donutshop 3y ago
Am wondering the same thing. I have yet to meet anybody that does aside from Microsoft themselves.
- tatersolid 3y ago
  We used Front Door for a while for our SaaS application, but actually had to turn it off because of a large customer whose janky internal IDP broke because of the mere presence of IPv6 on the Azure Front Door CNAME records. It worked well for about a week for everyone else.
- nullindividual 3y ago
  I use it for a number of web properties.
- nwah1 3y ago
  I worked at a commodities brokerage that used it. No problems.
nullindividual 3y ago
You can tell the error on the Portal is coming from AFD thanks to the style/format of it.
re-thc 3y ago
> Microsoft sells DDoS protection as part of Front Door They got in via a Back Door. A lot of places sell DDoS protection. Most of it only ever cover the basics. With the size of botnets, hacked computers, etc that are easily and cheaply available for rent - a lot of so called DDoS protection services can't compete. You really need to dig deep into what they mean by DDoS protection. What layers are covered? What type of services are covered? Also e.g. when they mention they cover volumetric attacks, it's often marketing more than the real deal. E.g. a provider sells $x of total protection (that number means across all PoPs, so usually $x / 30 or less). It can still go down if you focus all your attacks on a few PoPs that matter.
- MrOwnPut 3y ago
  It's also important whether it's active or passive. Really important for game servers to have active DDoS protection, like what OVH offers. Not one that kicks in after the attack is detected, otherwise your players get booted, which is the goal of the attacker.
  - re-thc 3y ago
    > Not one that kicks in after the attack is detected You can't even detect the attack. I've seen 1s that are well disguised or the patterns are so short there's not enough data to tell if it's an attack or real traffic. And yet it's enough to crash your connection or the service itself.
- stevefan1999 3y ago
  Also remember that Spamhaus attack shows upstream providers can also be the crack in the armor, too. They could've just knock out a whole regional network access given the huge volume of traffic.

Can confirm the impact appears total for the Azure portal; Microsoft sells DDoS protection as part of Front Door and other Azure services. Do they not use it themselves?

donutshop 3y ago

Am wondering the same thing. I have yet to meet anybody that does aside from Microsoft themselves.

tatersolid 3y ago
We used Front Door for a while for our SaaS application, but actually had to turn it off because of a large customer whose janky internal IDP broke because of the mere presence of IPv6 on the Azure Front Door CNAME records. It worked well for about a week for everyone else.
nullindividual 3y ago
I use it for a number of web properties.
nwah1 3y ago
I worked at a commodities brokerage that used it. No problems.

nullindividual 3y ago

You can tell the error on the Portal is coming from AFD thanks to the style/format of it.

re-thc 3y ago

> Microsoft sells DDoS protection as part of Front Door They got in via a Back Door. A lot of places sell DDoS protection. Most of it only ever cover the basics. With the size of botnets, hacked computers, etc that are easily and cheaply available for rent - a lot of so called DDoS protection services can't compete. You really need to dig deep into what they mean by DDoS protection. What layers are covered? What type of services are covered? Also e.g. when they mention they cover volumetric attacks, it's often marketing more than the real deal. E.g. a provider sells $x of total protection (that number means across all PoPs, so usually $x / 30 or less). It can still go down if you focus all your attacks on a few PoPs that matter.

MrOwnPut 3y ago
It's also important whether it's active or passive. Really important for game servers to have active DDoS protection, like what OVH offers. Not one that kicks in after the attack is detected, otherwise your players get booted, which is the goal of the attacker.
- re-thc 3y ago
  > Not one that kicks in after the attack is detected You can't even detect the attack. I've seen 1s that are well disguised or the patterns are so short there's not enough data to tell if it's an attack or real traffic. And yet it's enough to crash your connection or the service itself.
stevefan1999 3y ago
Also remember that Spamhaus attack shows upstream providers can also be the crack in the armor, too. They could've just knock out a whole regional network access given the huge volume of traffic.