News for hackers. Stuff that matters.

A comment on Serverless Horrors. Parent comment

Re:Serverless Horrors by gregoriol on Wednesday February 28, 2024 @07:17AM (#39536915)
So instead of DDoSing someone, you could make some not-so-large amount of requests to their APIs and instead of taking down their servers, you'll just take them down by bankrupting them with a huge invoice?
[ Parent | on HN ]
Re:Serverless Horrors by margorczynski on Wednesday February 28, 2024 @08:08AM (#39537354)
Representational state terrorism
[ Parent | on HN ]
Re:Serverless Horrors by kikimora on Wednesday February 28, 2024 @01:14PM (#39541706)
With default settings an attacker can run up-to 10000 req/sec on your api gw which would result in a sizable bill if left unnoticed. So with AWS you have to configure throttling and AWS protects you from low level ddos. How do you save yourself from a huge traffic bill in a VPS?

AWS also has WAF to protect from DDoS , it is expensive but may save a day if you urgently need a protection.

[ Parent | on HN ]