Ask HN: Someone is proxy-mirroring my website, can I do anything?

Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by MadVikingGod on Monday December 12, 2022 @10:36AM (#33955771)

I remember years ago there was a way to DDoS a server by opening the connection and sending data REALLY slow, like 1 byte a second. I wonder if there is a way to do the opposite of that, where ever request is handed off to a worker which slow enough to keep the connection alive. I doubt this can scale well, but just a thought.

[ Parent | on HN ]

Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by ambicapter on Monday December 12, 2022 @10:40AM (#33955827)

Slow loris attack https://en.wikipedia.org/wiki/Slowloris_(computer_security)

[ Parent | on HN ]

Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by macNchz on Monday December 12, 2022 @10:43AM (#33955865)

The “opposite” thing you’re describing sounds like a tarpit: https://en.m.wikipedia.org/wiki/Tarpit_(networking)

[ Parent | on HN ]

Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by zhfliz on Tuesday December 13, 2022 @05:14AM (#33966802)

you can have some fun with nginx if you can identify on your backend whether the request is coming from a malicious source, e.g. with X-Accel-Limit-Rate

[ Parent | on HN ]