4 ms·
I don't really understand how a DDoS can happen when the portal is using MS routing. Should be a simple fix. More likely some misconfiguration.
by AtNightWeCode 3y ago
I don't really understand how a DDoS can happen when the portal is using MS routing. Should be a simple fix. More likely some misconfiguration.
- MuffinFlavored 3y agoi wonder how much traffic it would take to DDoS Azure's Web UI. You're talking about like 1,000,000+ orchestrated/coordinated silently hijacked machines all... what? curl'ing in a loop some API of theirs?
- re-thc 3y agoMost people over-estimate what DDoS protection provides. There are all sorts of tricky attacks. The APIs are now so complex there are lots of layers - load balancers, gateways, kubernetes, etc etc. The attackers can exploit any amount of them until they find it. It could be a bug e.g. integer overflow on a specific header or the lower TCP layers, etc. It can also be very tricky to detect and stop. You may imagine the attacks to be constant but they are not. They do enough to deny service but not enough to be detected. It makes it very hard to differentiate from real traffic.
- AtNightWeCode 3y agoOne problem could be JWT. Anybody can use the bearer tokens from the portal and then use K6 to flood any endpoint. If you are willing to pay for the attack which states often do.
- MuffinFlavored 3y agoWhat's K6 in this context?
- tejado 3y agoLikely Grafana K6: “ A modern load testing tool, using Go and JavaScript - https://k6.io https://k6.io “