"A distributed denial of service attack (DDoS) occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers."
Questions tagged [ddos]
559 questions
7
votes
2 answers
Linux TCP server: reading client's IP address before accepting connection
Related: C++ Winsock API how to get connecting client IP before accepting the connection?
Hi, when you are running a TCP server (written in C, using the Berkeley Socket API) is it possible to read a client's IP address/port before actually…

Kijewski
- 25,517
- 12
- 101
- 143
7
votes
0 answers
How to fix error «getaddrinfo ENOTFOUND localhost» on nuxt.js after DDoS?
Colleagues!
Faced an unusual problem, I could not find a solution on my own. The bottom line is: there is a website on Nuxt.js in conjunction with Laravel as a backend. In server-side rendering, the frontend sends requests to the backend through…

Oleg Nekrasov
- 71
- 2
7
votes
1 answer
What is the best way to protect a Google cloud function against a DDOS attack
I'm new in network and I want to protect the layer 7 of a Google cloud function. I've found cloud armour that allow to create an allow/deny ip list for an https load balancer. Also Cloudflare that propose an illimited ddos mitigation.
My questions…

echo test
- 101
- 1
- 10
7
votes
2 answers
Microsoft Azure DDOS protection
I am running an enterprise scale application in Microsoft Azure. I wanted to know what the recommendations are for DDOS projection in Microsoft Azure. The documentation clearly states that the platform is protected from DDOS with not much more…

Tariq
- 1,449
- 2
- 14
- 17
7
votes
1 answer
Explain limit_conn_zone $server_name in nginx
I am configuring nginx for basic DDoS protection. I want to use the limit_conn module as described in http://nginx.org/en/docs/http/ngx_http_limit_conn_module.html.
In particular I do not understand this example:
limit_conn_zone $binary_remote_addr…

hennadiy.verkh
- 972
- 2
- 11
- 16
6
votes
2 answers
Prevent Microsoft Safe Links Scanning
So today a client of mine sent out a marketing newsletter to around 140k clients that included a link to our web app.
What happened next was my web app experienced a flood of traffic (over 9000 requests in 15 minutes) from Microsoft-owned IP…

Gary
- 742
- 8
- 20
6
votes
3 answers
How to close urllib2 connection?
I have made a program using urllib2 that makes a lot of connections across the web. I noticed that eventually that this can be DDoS worthy; I would like to know how to close down each connection after I have done my business to prevent such an…

nobody
- 71
- 1
- 1
- 3
6
votes
2 answers
How to prevent DDoS attack on sms account verification
I have an app where users registers and enters their mobile phone and other data.
In order to verify that the user is valid, before i save it to my database, I send a sms to the user with a code. And after that they should enter the code in the…

LDev
- 85
- 5
6
votes
1 answer
Preventing DDOS attack, for Django app with nginx reverse proxy + gunicorn
I am writing a Django app which uses an nginx reverse proxy + gunicorn as a webserver in production.
I want to include the capability to stop DDOS attacks from a certain IP (or pool of IPs). This as to be at the nginx level, rather than any deeper…

Hassan Baig
- 15,055
- 27
- 102
- 205
6
votes
1 answer
Slow HTTP POST vulnerability on azure
I have asp.Net MVC web application deployed on azure. And have some problems with Slow HTTP POST vulnerability. So I want to configure <\limits> to turn on connectionTimeout.
I can`t do this in Web.config (or mb just don`t know right place to write…

Andrew Babiychuk
- 121
- 1
- 4
6
votes
1 answer
Why does the webserver throttles ajax queries - DDoS?
I have an issue on a HTML5 web app where I have repetitive data updates via an ajax query every two seconds. The first two or three go through at 175ms, but after this, they slow down to 500ms, from then on. The hosting company swears that it is not…

William Thompson
- 81
- 7
6
votes
2 answers
Ruby on rails with nginx ddos protection
I have rails3 + nginx stack.
Several days ago it was ddos attack with lots of GET requests similar to:
GET /?aaa2=bbbbbbb&ccc=1234212
GET /?aaa1=bbbbbbb&ccc=4324233
First of all I added to application controller rule:
before_filter :ddos_check
def…

Voldemar Duletskiy
- 981
- 1
- 11
- 30
6
votes
3 answers
Does Amazon beanstalk automatically prevent DDoS
Does Amazon Beanstalk automatically prevent (distributed) denial of service attack? If not, whats the most convenient way to do so?

EternallyCurious
- 2,345
- 7
- 47
- 78
6
votes
2 answers
Google App Engine and dos.xml
My understanding is that the only way to really mitigate a DDoS attack is to automate the process of blacklisting IP addresses/ranges.
Google App Engine (GAE) allows you to configure and upload a dos.xml file and specify IP addresses/ranges to…

IAmYourFaja
- 55,468
- 181
- 466
- 756
5
votes
5 answers
DDOS attack: defending with Thread.Sleep()?
If I introduce a Thread.Sleep(x) delay while rendering my HTTP response, where x would change depending on the rate of requests from a given IP: from being zero while request rate is low, and gradually increasing if requests are following one after…

Andy
- 2,670
- 3
- 30
- 49