News for hackers. Stuff that matters.

A comment on MangaDex infrastructure overview. Parent comment

Re:MangaDex infrastructure overview by starfallg on Tuesday September 07, 2021 @03:55AM (#28442162)
>In their case they run a site that is probably under constant attack by the "hired goons", so they're going to need to have more moving parts than others.

That's taken care of by the DDoS-Guard system they placed fronting their infrastructure. The design of their system has to take this into account, but that is mainly on a IP and DNS level. The design of their stack behind the loadbalancer is mainly driven by their functional and non-functional requirements, rather than by the need to prevent DDoS attacks.

[ Parent | on HN ]
Re:MangaDex infrastructure overview by radicalbyte on Tuesday September 07, 2021 @04:14AM (#28442284)
The layering - defence in depth - is very much a security consideration. Especially if you're building a pure request/response/sync system you need that. Or you decouple with a queue for mutations and avoid a lot of issues.
[ Parent | on HN ]
Re:MangaDex infrastructure overview by starfallg on Tuesday September 07, 2021 @04:56AM (#28442539)
That may be in terms of managing general security, especially with regards to the attack surface of the solution, but here we are talking about DDoS, which is mostly a separate topic and handled on the network level (for volumetric attacks) and load-balancer level (for non-volumetric attacks) or a combination of both.
[ Parent | on HN ]