Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to protect a website from DoS attacks

What is the best methods for protecting a site form DoS attack. Any idea how popular sites/services handles this issue?.

what are the tools/services in application, operating system, networking, hosting levels?.

it would be nice if some one could share their real experience they deal with.

Thanks

like image 202
Mahes Avatar asked Nov 24 '10 00:11

Mahes


People also ask

How do websites prevent DDoS attacks?

It puts up a robust firewall A firewall is your first line of defense against DDoS attacks. As we mentioned earlier, it checks all traffic and requests coming to your site. If it detects an intrusion or identifies a malicious bot attempting to access your site, it will block it.

What is the best defense against DoS attacks?

Use a next-generation firewall, load balancer or a DoS protection appliance. A near-ideal solution is to use a cloud-based DoS protection service. Many enterprises rely on such vendors to offload DoS traffic when the going gets rough. Just be sure to vet these companies and choose a solution in advance.

Can you protect against a DDoS attack?

DDoS Protection Techniques In some cases, you can do this by placing your computation resources behind Content Distribution Networks (CDNs) or Load Balancers and restricting direct Internet traffic to certain parts of your infrastructure like your database servers.

How does DoS attack a website?

A Denial-of-Service (DoS) attack is an attack meant to shut down a machine or network, making it inaccessible to its intended users. DoS attacks accomplish this by flooding the target with traffic, or sending it information that triggers a crash.


1 Answers

Sure you mean DoS not injections? There's not much you can do on a web programming end to prevent them as it's more about tying up connection ports and blocking them at the physical layer than at the application layer (web programming).

In regards to how most companies prevent them is a lot of companies use load balancing and server farms to displace the bandwidth coming in. Also, a lot of smart routers are monitoring activity from IPs and IP ranges to make sure there aren't too many inquiries coming in (and if so performs a block before it hits the server).

Biggest intentional DoS I can think of is woot.com during a woot-off though. I suggest trying wikipedia ( http://en.wikipedia.org/wiki/Denial-of-service_attack#Prevention_and_response ) and see what they have to say about prevention methods.

like image 119
Brad Christie Avatar answered Oct 05 '22 03:10

Brad Christie