3 ms·
People mention Cloudflare. Google Cloud Armor is another option (we looked into both). A colleague was DDoS attacked and was able to move the service behind Cl
by jackconsidine 3y ago
People mention Cloudflare. Google Cloud Armor is another option (we looked into both).
A colleague was DDoS attacked and was able to move the service behind Cloud Armor in a few hours, effectively ending a ridiculous barrage of network requests. I think CA charges a minuscule amount per request, and can be capped with a fix monthly cost which limits the DDoS liability.
- hknmtt 3y agobut all how are all these services able to let in valid traffic? won't they simply cut me off altogether to protect my infrastructure at the cost of no access for my users?
- pjc50 3y agoThe entire business model is in not cutting you off, but cutting off the requests. E.g. by forwarding them to the cloudflare captcha first. This does mean occasional false positives.
- kijin 3y agoUnfortunately, the captcha is a deal breaker for anyone who is running APIs instead of regular, boring, human-accessible websites. We can barely tell humans and robots apart, and have no idea how to tell good robots from bad robots.
- ElectricalUnion 3y agoThe idea is that a IP under heavy DDOS already has effectively 0% availability anyways. More that 0% is a infinite availability increase.