4 ms·
Wonder how you could even handle this if you weren’t using a big cloud provider and didn’t have a lot of money to spend.
by endisneigh 3y ago
Wonder how you could even handle this if you weren’t using a big cloud provider and didn’t have a lot of money to spend.
- ivanjermakov 3y agoPatch your HTTP server to mitigate the Rapid Reset attack: > To mitigate against the non-cancelling variant of this attack, we recommend that HTTP/2 servers should close connections that exceed the concurrent stream limit. This can be either immediately or after some small number of repeat offenses. https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack https://cloud.google.com/blog/products/identity-security/how...
- knorker 3y agoHow small a server setup do you mean? This was apparently 20k machines: https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/ https://blog.cloudflare.com/zero-day-rapid-reset-http2-recor... Most web services don't need clever protocol attacks to be downed by 20k machines.
- tristan9 3y agoYou can’t. If your webserver receives 400m rps it dies, end if story. Mitigations are just that, mitigations. They are as effective as buying a better door lock to protect your apartment from a nuke.