HTTP/2 Denial of Service Advisory

Re:HTTP/2 Denial of Service Advisory by zxcmx on Tuesday August 13, 2019 @06:20PM (#20690837)

The other way to look at it is that the only people who deeply need to care about things like this are cloud providers.

Basically anyone who cares about DoS resistance is using a CDN and/or cloud load balancers, or has enough scale to build out their own CDN.

Otherwise you'll get soaked at layer 3 anyway, L7 DoS resistance is "nice to have" but not enough.

[ Parent | on HN ]

Re:HTTP/2 Denial of Service Advisory by cmroanirgo on Tuesday August 13, 2019 @10:18PM (#20692184)

I am very interested in my little vps not being reduced to a smoking heap just because some script kiddie wanted some cheap lulz. Of course, it's not hard to dos a tiny vps, but I think it very important not to court unnecessary trouble.

[ Parent | on HN ]