4 ms·
How does DDoS mitigation look like? Do they use realtime dashboard with similar visualization to cut off hotspots?
by xfs 13y ago
How does DDoS mitigation look like? Do they use realtime dashboard with similar visualization to cut off hotspots?
- WestCoastJustin 13y agoIn my experience it is fairly manual. Here it is at a very high level. First you want to determine if this is really a DDoS or legitimate traffic. You might be notified via downtime, alerts of load, in this instance, I suspect; download graphs, log analytic (if using a cdn which can handle the load, then you might not notice for a while i.e. eye popping bill). Narrowing down the attack profile means looking at logs. Be that network flow data (very helpful) or in this instance web server logs. Probably something like: totals grouped by ip, destination url, etc to see if there are any spikes. Also, managing stress. If you are some type of retailer then you likely are losing money, people are asking for updates, etc. This can be extremely stressful.
- etix 13y agoWe use Munin for the graphs and Nagios for the alerts. The mitigation of the DDoS is done manually since we need to identify the patterns and block them.