Hacker News Reader

Comment by revelation | Hacker News Reader

If you're paying $30000 for a site that is pretty much all static in bandwidth costs a day, you're probably paying about $29990 too much.

View on HN

2.6 billion requests per hour will do that to you

Route them through a cached captcha page. Or just call cloudflare.

Haven't sites been DDoS'd that were using Cloudflare? Its good, but not a magic bullet.

Yeah, but my understanding is that it helps a lot. CloudFlare masks the actual IP address of the web site, and distributes the load through the CloudFlare platform.

It's still possible to overload that capacity, but it's a lot more than what any standalone web server can take. Furthermore, the web server itself will stay online, as it isn't actually getting hit by the flood of requests.

Serving a captcha page is more work than serving a static page.

You can block with firewall IPs of users, who didn't solve captcha. You will get only SYNs from incoming connection requests then.

You don't really understand the distributed part of DDoS. I've had services taken down my attacks and when doing a post mortem we could see the increase in traffic, but when accounting for frequency, our office was still the main user.

This isn't a normal day... 2.6 Billion requests per hour is a LOT of traffic and that isn't free.

CDN costs money too. 722K req/s is a lot.

What would you recommend?

http://en.wikipedia.org/wiki/Coral_Content_Distribution_Netw...

Not sure if it can handle the load...

http://conferences.sigcomm.org/sigcomm/2009/posters/sigcomm-...

Sure, the target will not be affected, but CoralCDN network will, and it will not be able to handle the load of the attack. They don't have enough resources.

Reply on news.ycombinator.com