5 ms·
Yea our sites used to be DDOSed daily for 2 months. We're now getting a DDOS once or twice a week. Edit: Some numbers, most of them are between 2k-5k requests
by wombarly 5y ago
Yea our sites used to be DDOSed daily for 2 months. We're now getting a DDOS once or twice a week.
Edit: Some numbers, most of them are between 2k-5k requests per second. But we had some with 20k-30k rps.
- busymom0 5y agoDo you solve it using the "Under Attack" mode on CF where it shows the "redirecting in 5 seconds" msg? I am curious how CF takes care of the DDOS.
- wombarly 5y agoCloudflare detects the DDOS and will block it, notifying you by email. We almost never use the Under Attack Mode unless it's actually affecting us. The biggest thing we do to help ourselves when we're under attack is making sure that the pages being ddosed (homepage, etc) is being cached by them. There will always be some requests that CF doesnt block, so the cache ensures they get served by them.
- busymom0 5y ago> The biggest thing we do to help ourselves when we're under attack is making sure that the pages being ddosed (homepage, etc) is being cached by them. What about pages which can't be cached? For example an updated comment feed? How would you deal with dynamic data?
- wombarly 5y agoPeople who DDOS sites usually attack the homepage. If they attack a dynamic page, check if you can cache them for 30 or 60 seconds. Pretty close to real time. If you have cookie based authentication for those pages, its going to be difficult to cache them at all though. Which is where SPAs come in useful since auth is client side.
- deleted 5y ago[deleted]
- deleted 5y ago[deleted]
- busymom0 5y agoFor those curious, I am reading more about it here: https://www.cloudflare.com/en-ca/learning/cdn/caching-static-and-dynamic-content/ https://www.cloudflare.com/en-ca/learning/cdn/caching-static...