Quote:
Originally Posted by Halladar
[You must be logged in to view images. Log in or Register.]
I don't know what all is involved in a ddos attack, but if something like ip registration doesn't help, does that mean virtually any site could be dropped by a hoster if someone is mad enough at them?
|
That's pretty much the case, yes. You can mitigate by making sure that the malicious requests are as cheap as possible (for example, have the firewall drop an auth request before it gets to an app server), but at some point you have to look at each packet and make a decision.
There are probably hardened edge proxies out there that are good at mitigating the attack. They might cost $10k+ each and up, though, for all I know. I'm not much of a network guy. More of a dev.