Pentesting the new webapp that we have developed before having an external source have a go at it and give us a risk assessment. Now we have come to the portion right at the end; DDOS.
For the most part guides outlining best practices have been followed at an attempt to mitigate DDOS with some rules in our proxy layer before hitting our webapp. The question is not based around that though.
Reading up online I have come across some readings stating that blockchain could potentially solve the DDOS problem. I struggle to understand how. The whole problem behind DDOS as I understand it is that there is always a single point of failure. Even with the Filters in front you are just moving that point to the whatever is the Filter instead of your webapp - the attack just has a different physical destination - and while your webapp may never be touched, your proxy will and that's just as good. So the current solution to DDOS is throwing money at the problem in forms of big infrastructure?
If I think about it - would they use block chain as the underlying mechanism to build a system to co-ordinate a peer to peer sharing of bandwidth( some articles mentioned Gladius company, though not sure if this is what they are going after) where subscribed users share their unused bandwidth(i.e. when at work) and basically you place this system as a fallback proxy when under attack to route traffic to your webapp trying to throttle any traffic with bad indicators attached to them under some defined rules. This does not change the solution to a DDOS attack but rather the execution as you are no longer renting hardware from a big company but getting the hardware needed from a pooled source on demand - so community driven to lower the cost of the solution making it open to medium businesses as well instead of only massive ones?
Is this what is meant by using block chain to fight DDOS attacks? If no, why and what is meant? If yes, are there technical docs I may read? I am not clued up on block chain at all and probably do not know which key words to search for such docs.