AWS Best Practices for DDoS Resiliency [pdf]

Re:AWS Best Practices for DDoS Resiliency [pdf] by falcolas on Saturday July 04, 2015 @10:43AM (#9830286)

So, basically, pull out the pocketbook and we'll hook up our vacuum to it.

Attempting to outscale a DDOS (the primary mitigation method presented by Amazon) is going to DDOS your bank account. Personally, I'd rather see some more recommendations along the lines of the "VPC can minimize potential attack surfaces".

[ Parent | on HN ]

Re:AWS Best Practices for DDoS Resiliency [pdf] by airza on Saturday July 04, 2015 @11:01AM (#9830341)

I'm dubious about the number of people who actually read this- trying to outspend a bunch of distributed attackers isn't 1) a novel solution that is AWS specific and 2)not an effective or cheap strategy.

[ Parent | on HN ]

Re:AWS Best Practices for DDoS Resiliency [pdf] by ra1n85 on Saturday July 04, 2015 @11:43AM (#9830467)

Sounds like there could be awesome features here.

Remotely triggered black holes for VPC? Elastic Firewall?

Not crazy about firewalls in general, but they would help in the case that you are paying for data-out.

[ Parent | on HN ]

Re:AWS Best Practices for DDoS Resiliency [pdf] by toomuchtodo on Saturday July 04, 2015 @06:32PM (#9831807)

Firewalls are useless in a DDOS attack.

[ Parent | on HN ]

Re:AWS Best Practices for DDoS Resiliency [pdf] by shitlord on Saturday July 04, 2015 @09:20PM (#9832173)

If you use BPF, you should be able to filter out the bad traffic effectively. Although, if you're getting flooded with an absurd amount of traffic (faster than the network card can consume), then there's nothing to do.

[ Parent | on HN ]