Hacker News Reader

> Until Akvorado integrates DDoS detection and mitigation

So you would integrate them?

Anyway, Akvorado is a beautiful piece, kudos.

I just need some time to tinker with it...

Something like outlined in the article should be doable without too much complexity. However, I also need to be able to use the result for AS12322 and I didn't disclose everything in the article. I need to tinker a bit more.

IMO the most straightforward solution would be to something like:

a) add these 'metric counters' in a little more friendly way than mess with ClickHouse itself (maybe a directory with *.sql to be loaded on the start/file change?)

b) a way to publish them in JSON through the webserver

After that I can just poll the endpoint with a script and do whatever I need with that info.

AFAIR ClickHouse has a built-in REST-like interface, which can be used for that but that means the need to expose ClickHouse itself.

This is really nice! Have you looked at using stream processors such as ksql for the ddos detection?

Reply on news.ycombinator.com