5 ms·
In all fairness, systems administrators have always had to pay for unauthorized requests and systems to mitigate the risk The new thing is hyperscalers have so
by nijave 3y ago
In all fairness, systems administrators have always had to pay for unauthorized requests and systems to mitigate the risk
The new thing is hyperscalers have so much capacity you can get flooded by these long before the service degrades or goes offline
- kazen44 3y agoAlso, the cost of doing this per request is insane compared to either absorbing or rate-limiting the bandwith the requests take. Cloud computing charges you by the request/byte/cpu cycle. Servers do not have this issue. Also, is it simply not possible to rate limit this on a per IP basis? Make client only able to do X requests per second from each unique IP/network flow.
- nijave 3y ago>Cloud computing charges you by the request/byte/cpu cycle. Servers do not have this issue. Sure they do. Processing requests takes bandwidth, CPU, memory, disk I/O >Also, is it simply not possible to rate limit this on a per IP basis It's largely useless. You'll block any legitimate bits/programs, people on CGNAT, people on corporate networks & bad actors will use botnets, residential IPs, VPNs to gain access to thousands or millions of unique IPs
- yencabulator 3y agoThe overhead of handling the 403 is very very small compared to what S3 charges for a PUT.