3 ms·
So how does your other plan solve that?
by gzread 8mo ago
So how does your other plan solve that?
- johncolanduoni 8mo agoOnce an IP in a botnet attacks someone, it ends up on a blocklist and can’t attack anyone else who uses that blocklist. This is a big part of Cloudflare’s DDoS model: if you attack one CF property (with non-volumetric DDoS) you will not be able to attack any others with the same bot for an extended period. This makes attacks to CF properties limited in scope and way more costly, because you have to essentially “burn” IP addresses after sending relatively little traffic.
- gzread 8mo agoHow long does it take for a whole major ISP, say Verizon, to get on your blocklist?
- johncolanduoni 8mo agoConsidering nobody blocks the entirety of Verizon, apparently a long time. You can act like this is some insane plan, but it’s happening all the time and while it can lead to annoyance for end users the internet chugs on. Which it wouldn’t if there was no way to mitigate DDoS other than rate limits.