4 ms·
I believe it would though? Isn't that the whole point? If you need PoW for every connection, it's going to end up being very expensive for an attacker to satur
by brokenmachine 2y ago
I believe it would though? Isn't that the whole point?
If you need PoW for every connection, it's going to end up being very expensive for an attacker to saturate the connection. And the captcha is probably a different server to the main site.
- BenjiWiebe 2y agoYou can't check the PoW until it's at your connection. Do you mean that every packet everywhere would have PoW that is checked by their ISP/upstream?
- brokenmachine 2y agoNo, I meant just a usual gateway. I thought a gateway would work for that purpose. Are you sure it wouldn't? In that case there's no defending against ddos.
- BenjiWiebe 2y agoA gateway (router/firewall) on your own connection cannot protect you against a DDoS. Really nothing at your connection can prevent you from getting DDoSed. The attacker can cause you to go offline/degraded even if you are 100% successful at dropping his packets. They still fill up your inbound pipe and prevent (or majorly hinder) legitimate traffic from fitting in. The filtering/dropping of packets has to be upstream of your connection to be able to protect your connection - additionally somewhere where the available bandwidth is greater than the attacker's bandwidth.