Hot answers tagged ip-spoofing
4
We can but...
At the point the query makes it to your server it's already too late. Your server will waste its resources trying to do something with the packets and the requests. Even if you have something like iptables drop all connections it's still going to use up all of the bandwidth on the server inbound. Redirecting all traffic someplace else eats up ...
1
The problem is that you need to drop the traffic before it reaches your network. So even when dropping packets at your server is way too late. The best way to reduce risk is to use packet scrubbing services like Akamai or Cloudfare who have DDoS mitigation techniques in place to prevent this traffic from reaching your network.
1
The only sane protection against DDoS attacks is deploying a service like CloudFlare.
The very nature of a DDoS attack makes it difficult to detect and stop. How are you going to distinguish between malicious and normal traffic? Even if you have such a means, performing analysis on every single connect attempt on your server is probably going to overload ...
Only top voted, non community-wiki answers of a minimum length are eligible
