News for hackers. Stuff that matters.

A comment on Microsoft’s Azure portal down following new claims of DDoS attacks. Parent comment

Re:Microsoft’s Azure portal down following new claims of DDo... by Izikiel43 on Friday June 09, 2023 @03:18PM (#36262729)
Probably because the actual portal service call happens at new page load. Metric pages and everything else are data plane/control plane info most likely, which is coming from other services.

An easy way to validate this would be using fidler or similar to analyze the traffic that happens in the loaded page.

[ Parent | on HN ]
Re:Microsoft’s Azure portal down following new claims of DDo... by mixdup on Friday June 09, 2023 @09:03PM (#36266488)
This is exactly the case. API calls/cli tools never went down because they tickle the control plane APIs directly, and the Portal also tickles those APIs directly. The Portal seems to just be a client-side web app, and the CDN serving that and what ever minimal server-side infra that makes login work, etc was what was targeted by the ddos
[ Parent | on HN ]