Questions tagged [ddos]

"A distributed denial of service attack (DDoS) occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers."

559 questions
7
votes
2 answers

Linux TCP server: reading client's IP address before accepting connection

Related: C++ Winsock API how to get connecting client IP before accepting the connection? Hi, when you are running a TCP server (written in C, using the Berkeley Socket API) is it possible to read a client's IP address/port before actually…
Kijewski
  • 25,517
  • 12
  • 101
  • 143
7
votes
0 answers

How to fix error «getaddrinfo ENOTFOUND localhost» on nuxt.js after DDoS?

Colleagues! Faced an unusual problem, I could not find a solution on my own. The bottom line is: there is a website on Nuxt.js in conjunction with Laravel as a backend. In server-side rendering, the frontend sends requests to the backend through…
7
votes
1 answer

What is the best way to protect a Google cloud function against a DDOS attack

I'm new in network and I want to protect the layer 7 of a Google cloud function. I've found cloud armour that allow to create an allow/deny ip list for an https load balancer. Also Cloudflare that propose an illimited ddos mitigation. My questions…
7
votes
2 answers

Microsoft Azure DDOS protection

I am running an enterprise scale application in Microsoft Azure. I wanted to know what the recommendations are for DDOS projection in Microsoft Azure. The documentation clearly states that the platform is protected from DDOS with not much more…
Tariq
  • 1,449
  • 2
  • 14
  • 17
7
votes
1 answer

Explain limit_conn_zone $server_name in nginx

I am configuring nginx for basic DDoS protection. I want to use the limit_conn module as described in http://nginx.org/en/docs/http/ngx_http_limit_conn_module.html. In particular I do not understand this example: limit_conn_zone $binary_remote_addr…
hennadiy.verkh
  • 972
  • 2
  • 11
  • 16
6
votes
2 answers

Prevent Microsoft Safe Links Scanning

So today a client of mine sent out a marketing newsletter to around 140k clients that included a link to our web app. What happened next was my web app experienced a flood of traffic (over 9000 requests in 15 minutes) from Microsoft-owned IP…
Gary
  • 742
  • 8
  • 20
6
votes
3 answers

How to close urllib2 connection?

I have made a program using urllib2 that makes a lot of connections across the web. I noticed that eventually that this can be DDoS worthy; I would like to know how to close down each connection after I have done my business to prevent such an…
nobody
  • 71
  • 1
  • 1
  • 3
6
votes
2 answers

How to prevent DDoS attack on sms account verification

I have an app where users registers and enters their mobile phone and other data. In order to verify that the user is valid, before i save it to my database, I send a sms to the user with a code. And after that they should enter the code in the…
LDev
  • 85
  • 5
6
votes
1 answer

Preventing DDOS attack, for Django app with nginx reverse proxy + gunicorn

I am writing a Django app which uses an nginx reverse proxy + gunicorn as a webserver in production. I want to include the capability to stop DDOS attacks from a certain IP (or pool of IPs). This as to be at the nginx level, rather than any deeper…
Hassan Baig
  • 15,055
  • 27
  • 102
  • 205
6
votes
1 answer

Slow HTTP POST vulnerability on azure

I have asp.Net MVC web application deployed on azure. And have some problems with Slow HTTP POST vulnerability. So I want to configure <\limits> to turn on connectionTimeout. I can`t do this in Web.config (or mb just don`t know right place to write…
6
votes
1 answer

Why does the webserver throttles ajax queries - DDoS?

I have an issue on a HTML5 web app where I have repetitive data updates via an ajax query every two seconds. The first two or three go through at 175ms, but after this, they slow down to 500ms, from then on. The hosting company swears that it is not…
6
votes
2 answers

Ruby on rails with nginx ddos protection

I have rails3 + nginx stack. Several days ago it was ddos attack with lots of GET requests similar to: GET /?aaa2=bbbbbbb&ccc=1234212 GET /?aaa1=bbbbbbb&ccc=4324233 First of all I added to application controller rule: before_filter :ddos_check def…
Voldemar Duletskiy
  • 981
  • 1
  • 11
  • 30
6
votes
3 answers

Does Amazon beanstalk automatically prevent DDoS

Does Amazon Beanstalk automatically prevent (distributed) denial of service attack? If not, whats the most convenient way to do so?
EternallyCurious
  • 2,345
  • 7
  • 47
  • 78
6
votes
2 answers

Google App Engine and dos.xml

My understanding is that the only way to really mitigate a DDoS attack is to automate the process of blacklisting IP addresses/ranges. Google App Engine (GAE) allows you to configure and upload a dos.xml file and specify IP addresses/ranges to…
IAmYourFaja
  • 55,468
  • 181
  • 466
  • 756
5
votes
5 answers

DDOS attack: defending with Thread.Sleep()?

If I introduce a Thread.Sleep(x) delay while rendering my HTTP response, where x would change depending on the rate of requests from a given IP: from being zero while request rate is low, and gradually increasing if requests are following one after…
Andy
  • 2,670
  • 3
  • 30
  • 49
1 2
3
37 38