3 ms·
It's so easy to crush ddos with token buckets that usually the only thing I need my cat to wake me for is when my Discord gets raided.
by jart 3y ago
It's so easy to crush ddos with token buckets that usually the only thing I need my cat to wake me for is when my Discord gets raided.
- avg_dev 3y agonever heard of this before. I looked it up https://en.wikipedia.org/wiki/Token_bucket https://en.wikipedia.org/wiki/Token_bucket I think this would be like a firewall or ingress thing that would drop packets that resulted in excess load before they make it to the application server.
- jart 3y agoHere's the code I use: https://github.com/jart/cosmopolitan/blob/master/net/http/tokenbucket.c https://github.com/jart/cosmopolitan/blob/master/net/http/to...
- sakopov 3y agoIt's a common rate limiting algorithm. Here's an interesting article from Stripe on how they use it in their APIs. [1] [1] https://stripe.com/blog/rate-limiters https://stripe.com/blog/rate-limiters
- hnlmorg 3y agosome types of DDoS. ;) You could still overload the service with a sufficiently large attack in either volume of connection requests or number of unique IP addresses. Token buckets are usually part of an overall resilience strategy rather than a silver bullet to solve all denial of service concerns.