News for hackers. Stuff that matters.

A comment on Cloudflare's inaccessible browser contradicts the company's mission. Parent comment

Re:Cloudflare's inaccessible browser contradicts the company... by busymom0 on Monday August 02, 2021 @06:53AM (#28035056)
> The biggest thing we do to help ourselves when we're under attack is making sure that the pages being ddosed (homepage, etc) is being cached by them.

What about pages which can't be cached? For example an updated comment feed? How would you deal with dynamic data?

[ Parent | on HN ]
Re:Cloudflare's inaccessible browser contradicts the company... by wombarly on Monday August 02, 2021 @08:29AM (#28035677)
People who DDOS sites usually attack the homepage.

If they attack a dynamic page, check if you can cache them for 30 or 60 seconds. Pretty close to real time.

If you have cookie based authentication for those pages, its going to be difficult to cache them at all though. Which is where SPAs come in useful since auth is client side.

[ Parent | on HN ]
Re:Cloudflare's inaccessible browser contradicts the company... by busymom0 on Tuesday August 03, 2021 @01:58AM (#28046104)
For those curious, I am reading more about it here:

https://www.cloudflare.com/en-ca/learning/cdn/caching-static...

[ Parent | on HN ]