Stack Overflow
Stack Overflow

Questions tagged [ddos]

"A distributed denial of service attack (DDoS) occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers."

559 questions
5
votes
2 answers

Safe regex patterns from ReDos attack

I've recently faced with some redos attack issues. Explain in simple steps: Regex denial of services: it means the attacker can put some malicious/crafted inputs to bring your server down by making it impossible to stop to finding the correct…
SeyyedKhandon
  • 5,197
  • 8
  • 37
  • 68
5
votes
6 answers

Spring Boot 2 with Bucket4j to prevent DDOS Attacks

I would like to prevent DDOS attacks on my spring boot 2 web application and I came across the framework bucket4j (bucket4j-github). My application will run on heroku, and there they suggested doing so (Heroku-Link) So far so good. I am now trying…
Michael Hegner
  • 5,555
  • 9
  • 38
  • 64
5
votes
1 answer

Netty - how to survive DDOS?

I'm using netty 4.1 as NIO socket server for MMORPG game. It was running perfectly for years but recently we are suffering from DDOS attacks. I was fighting it for a long time but currently, I don't have any more ideas on how could I improve it.…
drygu
  • 51
  • 2
5
votes
1 answer

How to detect DDOS attacks in ASP.Net Core

What is The best way of preventing the distributed denial-of-service and denial-of-service attacks in ASP.Net core? How to handle protection in the request pipeline or separate middleware?
Iman Bahrampour
  • 6,180
  • 2
  • 41
  • 64
5
votes
1 answer

Can CloudFront protect EC2 server from DDOS?

I am maintaining an embedded database for a web app on an EC2 instance. Since this central server is single-threaded, it's very susceptible to DDOS (even a non-distributed attack would cripple it). AWS has DDOS protection for its CDN CloudFront, so…
rampatowl
  • 1,722
  • 1
  • 17
  • 38
5
votes
0 answers

Prevent one websocket connection flooding in NGINX?

I use this config for preventing DOS like floodings on my server: limit_req_zone $binary_remote_addr zone=one:10m rate=10r/s; limit_req_zone $binary_remote_addr zone=sms:10m rate=1r/m; upstream main_server{ server web_instance_1:8000; } server…
Mojtaba Kamyabi
  • 3,440
  • 3
  • 29
  • 50
5
votes
1 answer

Simple anti DDoS protection in FreeBSD

I have a lot of request from data centers to my web server on FreeBSD and sometimes it've have a lot of performance problem with my web projects. Adding to IPFW list all IP's data centers is impossible. I don't want to use a large Anti-DDoS systems,…
Yevhen L.
  • 71
  • 7
5
votes
3 answers

Can't Access Plesk Admin Because Of DOS Attack, Block IP Address Through SSH?

I can't access Plesk Amdin because of DOS attack; can I block a hostname or IP address through SSH? If so, how would I be able to do this? Thank you!
olimits7
  • 555
  • 2
  • 9
  • 26
4
votes
3 answers

Using random name fields for input to fight spambots

I'm considering using random input names for registration form. It would be done this way: User requests register form site. Create random names for input fields and save them to user's session. Render form and display it to the user. I just…
Vanitas
  • 95
  • 1
  • 6
4
votes
1 answer

How do you prevent a denial of service from exhausting a thread pool on a socket server in Java?

For work I have written a specialized HTTP server which only performs 301/302/Frame redirections for web sites. Recently, some nefarious clients have been intentionally opening sockets and writing one character every 500 milliseconds in order to…
Deven Phillips
  • 1,129
  • 14
  • 39
4
votes
1 answer

Can I block request by Cookie value in Nginx?

I want to block exact cookie value like PHPSESSID in Nginx. Does this possible? My site under DDoS but I can't block by IP due to shared addresses. Attackers use same value of Cookies so I try to block by cookie value. Thanks
J.Mae
  • 73
  • 1
  • 5
4
votes
1 answer

Possible DDoS attack?

I am getting hundreds of lines of the same request in my access logs as of July 4th. This one came up thousands of times in the hours around this date: 86.128.198.216 - - [22/Jul/2011:00:44:16 +0100] "GET /404.htm HTTP/1.1" 302 414 "-" "Mozilla/4.0…
RichieAHB
  • 2,030
  • 2
  • 20
  • 33
4
votes
1 answer

Is Google Cloud Armor free with other Google Cloud products?

AWS has AWS Shield for free, and they seem pretty similar. Right now DDoS protection is the most important reason to go cloud for me, so this may be the deciding factor.
A. Owl
  • 51
  • 1
  • 6
4
votes
1 answer

Would Google or Facebook ever be at risk of suffering a DDoS attack?

How strong is Google? I am curious, how much defense do they have? Also, do ISPs give users tiny upload capacity because they worry about DDoSes?
Adel
  • 43
  • 3
4
votes
0 answers

Cloudflare scrubbing Access-Control-Allow-Origin header when in Under Attack Mode

I need to be able to set the Access-Control-Allow-Origin response header with my server, however when I switch to Under Attack Mode (which I need right now because I'm being DDOSed), Cloudflare scrubs this and a bunch of other headers which is…
Anthony
  • 13,434
  • 14
  • 60
  • 80
1 2 3
…
37 38