2 ms·

For an analogy, the best way to stop a big flood is with a dam, and services like Cloudflare provide an upstream (i.e. DNS) dam mitigating DDOS. Without such a

For an analogy, the best way to stop a big flood is with a dam, and services like Cloudflare provide an upstream (i.e. DNS) dam mitigating DDOS. Without such an upstream service and short of building an extensive infrastructure yourself, you basically have to batten down the hatches and have a server (plus preceding switches etc.) that can handle a large amount of traffic. I think there are other services, but Cloudflare is the most prominent and is used by sites like 4Chan to avert DDOS.

laumars 14y ago
This is what I used to believe as well. But I'm reading more and more about how ISPs are filtering out such attacks and how some dedicated networking gear (eg Pravail APS) can stop at least some types of DDoS attacks from saturating your web farm. It's that side of things that I'm mostly unclear about. Are solutions like Pravail APS basically snake oil?