Re:Cloudflare servers don't own IPs now, so how do they conn...
by remram on Friday November 25, 2022 @02:03PM
(#33745681)
Anycast is implemented by BGP and doesn't take load into account in any way. You will reach the closest location announcing that address (well, prefix).
[ Parent
| on HN ]
Re:Cloudflare servers don't own IPs now, so how do they conn...
by ignoramous on Friday November 25, 2022 @03:15PM
(#33746303)
TFA claims that Anycast is an advantage when dealing with DDoS because it helps spread the load? A regional DDoS (where it consistently hits a small set of DCs) is not a common scenario, I guess?
Re:Cloudflare servers don't own IPs now, so how do they conn...
by csande17 on Friday November 25, 2022 @05:19PM
(#33747422)
Basically yes. Large-scale DDoS attacks rely on compromising random servers and devices, either directly with malware or indirectly with reflection attacks. Those hosts aren't all going to be located in the same place.
An attacker could choose to only compromise devices located near a particular data center, but that would really reduce the amount of traffic they could generate, and also other data centers would stay online and serve requests from users in other places.