Hacker News Reader

That's "building your own cloudflare".

> Make it cheap to handle the DDOS traffic and expensive to generate the DDOS traffic

The traffic is from compromised devices, so it's very cheap.

Even so, the suggestion is a good one. Modern proxies have gotten much better at handling auth and processing the traffic as the GP describes. Service meshes have these features built in now when a few years ago we had to roll our own solutions with haproxy or nginx.

If you can make it take 10x as long to send a request, the DDOS attack becomes 1/10 the size.

Only for some categories - SYN floods aren't limited by responses at all.

Reply on news.ycombinator.com