Re:A Beginner's Guide to Scaling to 11M Users on Amazon's AW...
by scurvy on Wednesday December 26, 2018 @11:19AM
(#18762845)
What happens if someone sends a layer 7 DDoS that you do respond to with a 200? Or 300-level?
Re:A Beginner's Guide to Scaling to 11M Users on Amazon's AW...
by sofaofthedamned on Wednesday December 26, 2018 @02:55PM
(#18764371)
Then you're screwed I suppose. To do that they'd likely be performing some sort of replay attack, in which case you should be mitigating against this. There's no magic bullet anywhere.
Once you have setup Lambda in one region
You just need to loop through the list of regions and deploy your lambda in ALL AVAILABLE REGIONS. Yes, it's that simple!
API gateway doesn't charge for 4xx response, so it's very good for defying level 7 ddos too.
Add cognito and use lambda authorizer, it generates API keys and emails it to your users.
Add a Latency Based DNS routing using route 53 on top and you ensure minium latency in all regions!