Timeline for How is DDoS possible if you're not listening to the DoS traffic?
Current License: CC BY-SA 3.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 7, 2015 at 22:19 | vote | accept | amyassin | ||
| S Mar 7, 2015 at 5:43 | history | suggested | Schism | CC BY-SA 3.0 |
minor grammar edits, + fix stylisation of CloudFlare
|
| Mar 7, 2015 at 5:37 | review | Suggested edits | |||
| S Mar 7, 2015 at 5:43 | |||||
| Mar 7, 2015 at 3:54 | comment | added | hobbs | @amyassin in this case, yes. Not every attack depends on sheer bandwidth exhaustion (you can exhaust other resources in server software, OS kernels, or routing hardware), but a distributed attack with amplification makes it possible to overwhelm even a fat pipe to the point that legitimate traffic gets dropped. | |
| Mar 6, 2015 at 23:29 | comment | added | Polynomial | CloudFlare also has the benefit of being able to use anycast routing to distribute the load of the attack away from the target - a luxury you don't have at the ISP level, let alone at your router. | |
| Mar 6, 2015 at 22:44 | comment | added | tlng05 | @Gudradain Yes, you are supposed to do your best to hide your real IP. CloudFlare has a blog post on this subject: blog.cloudflare.com/ddos-prevention-protecting-the-origin | |
| Mar 6, 2015 at 22:30 | comment | added | amyassin | to overwhelming your link? I guess so. But not other types if you are filtering your traffic to only accept traffic from cloudflare IP addresses.. | |
| Mar 6, 2015 at 22:00 | comment | added | Gudradain | I understand that Cloudflare can have enough bandwidth to absorb all the traffic, filter it and only send the real client to you. But, if the attacker find your real IP (not your fake cloudflare IP), you will still be vulnerable to DDoS right? | |
| Mar 6, 2015 at 21:45 | comment | added | amyassin | Oh so the trick is to saturate the link with garbage, not overwhelm the server processing powers?? | |
| Mar 6, 2015 at 21:33 | history | answered | Jeff Ferland♦ | CC BY-SA 3.0 |