0

I once read that if I send a DDoS attack via a proxy (for example with LOIC), I won't target the server I am trying to send a DDoS attack to but I will actually DDoS the proxy server.

Most important question: is this true? And if so, why?

For the record: I don't want to do anything evil :)

  • Why downvoted? Sounds like a good question to me. – William Edwards Sep 22 '14 at 16:51
6

In the intended case, the proxy server will forward the attackers flood attack to the target. This means that the proxy experiences as much incoming traffic as the target, plus as much outgoing traffic as the attacker, so the attacker will hit the proxy server twice as hard as the actual target.

However, most proxy servers use caching. This means when the same URL is requested multiple times from the same website (like LOIC does), the proxy will only fetch it once and then serve its local copy without contacting the destination again. In that case the attacker will only consume resources on the proxy, and not on the target site.

In fact, setting up a lean reverse proxy with caching enabled in front of a web application is standard procedure of defending against DDOS attacks. By using a caching proxy server on the client-side, the attacker does that for the target.

  • @WilliamDavidEdwards How does it not answer your question? – Philipp Sep 9 '14 at 14:36
  • @WilliamDavidEdwards Do you have any suggestions how it could be explained clearer or what's missing? – Philipp Sep 9 '14 at 14:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.