A DDoS attack can be a very troublesome experience for anyone running any kind of website. Hackers and their tools are becoming more and more sophisticated and these attacks are becoming harder to stop. If your website is successfully targeted by a DDoS attack and you don’t have any adequate protection, your website will go offline and you’ll have to bring it back manually.
This can cause a number of problems and cost you money, and it’s best to prevent them before they happen. Today I want to talk about a few ideas on how to do just that, so if that’s something you’re interested in, just read on!
The digital attack map is a joined initiative from Google and Arbor Networks, that provides routers allowing to mitigate applicative Dos and DDos attacks. It permits to visualize in “real time” the principal DDoS attacks in the world, at a given moment. It is interesting to see how much of a standard these attacks became.
It is also possible (and more and more fashionable) to try and saturate equipment such as firewalls, switchs, routers, reverse proxies, load balancers. It is possible, for example, to exceed their treatement capacity by sending them too many packets for example. If the limit of an equipment is 1 Gb/s, it also stands in the number of packets that this equipment can treat per second (and this fact is less known).
If a DDoS sends 200 KPPs (Kilo Packet Per Second) and that the treatement limit is 100 KPPs, the equipment is saturated, even if thoses 200 KPPs represent only 50 Mb/s of bandwidth for a 1Gb/s limit. Thus, this method consists in sending a huge amount of small paquets.
More Info: what is ddos attack
This can cause a number of problems and cost you money, and it’s best to prevent them before they happen. Today I want to talk about a few ideas on how to do just that, so if that’s something you’re interested in, just read on!
The digital attack map is a joined initiative from Google and Arbor Networks, that provides routers allowing to mitigate applicative Dos and DDos attacks. It permits to visualize in “real time” the principal DDoS attacks in the world, at a given moment. It is interesting to see how much of a standard these attacks became.
It is also possible (and more and more fashionable) to try and saturate equipment such as firewalls, switchs, routers, reverse proxies, load balancers. It is possible, for example, to exceed their treatement capacity by sending them too many packets for example. If the limit of an equipment is 1 Gb/s, it also stands in the number of packets that this equipment can treat per second (and this fact is less known).
If a DDoS sends 200 KPPs (Kilo Packet Per Second) and that the treatement limit is 100 KPPs, the equipment is saturated, even if thoses 200 KPPs represent only 50 Mb/s of bandwidth for a 1Gb/s limit. Thus, this method consists in sending a huge amount of small paquets.
More Info: what is ddos attack
No comments:
Post a Comment