Stack Overflow
Stack Overflow

Questions tagged [ddos]

"A distributed denial of service attack (DDoS) occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers."

559 questions
97
votes
7 answers

How can I implement rate limiting with Apache? (requests per second)

What techniques and/or modules are available to implement robust rate limiting (requests|bytes/ip/unit time) in apache?
bd808
  • 1,781
  • 1
  • 22
  • 31
93
votes
10 answers

How to enable DDoS protection?

DDoS (Distributed Denial of Service Attacks) are generally blocked on a server level right? Is there a way to block it on a PHP level, or at least reduce it? If not, what is the fastest and most common way to stop DDoS attacks?
rockstardev
  • 13,479
  • 39
  • 164
  • 296
64
votes
2 answers

What is a Ray ID (Cloudflare)?

Every time I visit a website that is using Cloudflare's Under-Attack-Mode, it shows me the usual text telling me to wait a few seconds until Cloudflare verified I am not a bot. Every time I reload the page it changes my current Ray ID. What is the…
Kreativ
  • 641
  • 1
  • 5
  • 3
62
votes
4 answers

How to protect against distributed denial-of-service attacks in Node.js with Socket.io?

I have been learning node.js and socket.io lately. My question is how can I protect server against client side attacks? This is my server code io.sockets.on('connection', function (socket) { //users.push(socket); socket.on('message',…
Virushan
  • 723
  • 1
  • 7
  • 6
51
votes
3 answers

Can one cache and secure a REST API with Cloudflare?

I am designing a RESTful API that is intended to be consumed by a single-page application and a native mobile app. Some calls of this API return public results that can be cached for a certain time. Moreover, there is a need for rate protection to…
flexponsive
  • 6,060
  • 8
  • 26
  • 41
38
votes
5 answers

Application vulnerability due to Non Random Hash Functions

Below excerpt is from an article that explains possibility of Denial Of Service(DoS) attack because of non random hash functions used in Hash Data Structures. […] the condition can be leveraged by exploiting predictable collisions in the…
Sumit
  • 706
  • 1
  • 8
  • 16
27
votes
7 answers

How to leave client waiting for Java JAX-RS service to prevent DOS

I'm having an issue with a web service with users trying to guess application IDs by looping over random IDs. The bad requests are coming from random IPs, so I cannot just ban their IP (unless I do it dynamically, but I'm not looking into that…
James
  • 17,965
  • 11
  • 91
  • 146
25
votes
3 answers

Does firebase hosting benefit from CloudFlare?

I was looking at https://material-ui-next.com who seem to be running on firebase hosting and use CloudFlare on top of it. This raised a question. Do firebase hosting websites need additional layers for things like DDoS protection? As as I am aware,…
Ilja
  • 44,142
  • 92
  • 275
  • 498
24
votes
1 answer

What is randomly replacing Baidu TongJi (Analytics)'s Javascript code to make DDOS attack on websites on browser?

Update: It seems that different hm.js (Baidu TongJi JS library) are loaded. When no DDOS attack is observed, a standard hm.js is loaded; when there is a DDOS, a totally different hm.js is loaded. I am suspecting the Great Firewall of China is…
williamli
  • 3,846
  • 1
  • 18
  • 30
24
votes
1 answer

How to prevent DoS attack in ASP.NET MVC applications?

I don't want someone keep F5 my site or using some tool to request the page frequently. That is to say, prevent an Action or the Controller to be invoked frequently by one client. How can I implement this? Is there any package I can use? just like…
Edi Wang
  • 3,547
  • 6
  • 33
  • 51
23
votes
1 answer

What happens if a DDOS attack hits Windows Azure Web Sites?

I am just thinking of moving a website from a VPS to Windows Azure Web Sites. After doing a load test, I accidentally took down my test website, using around 30MB over the daily bandwidth. This made me wonder what would happen if my website was…
Dejan Pelzel
  • 359
  • 1
  • 3
  • 5
21
votes
2 answers

Does Heroku protect individual sites from DoS / DDoS attacks?

Heroku is, it seems, under a DDoS attack right now, which is causing intermittent availability issues across the site manifesting themselves on (of course!) my app. I have seen a number of these kinds of attacks recently, including the huge DDoS…
sscirrus
  • 55,407
  • 41
  • 135
  • 228
21
votes
5 answers

How to simulate DDOS/Slashdotting?

So, I'd like to get more experience working with high-traffic websites, but unfortunately the Internet is not beating down the doors to my blog. How can I simulate tens/hundreds of hits per second on my blog and test its performance? I'm hosting my…
Kevin Burke
  • 61,194
  • 76
  • 188
  • 305
17
votes
5 answers

Brute-force/DoS prevention in PHP

I am trying to write a script to prevent brute-force login attempts in a website I'm building. The logic goes something like this: User sends login information. Check if username and password is correct If Yes, let them in. If No, record a failed…
nickf
  • 537,072
  • 198
  • 649
  • 721
13
votes
5 answers

DDOS Attacks - Restful Web Services

Could you please list some strategies or even approaches you have already applied to prevent/protect/minimize DDOS attacks upon Restful Web Services? Thanks.
Michael Henrique
  • 235
  • 1
  • 2
  • 10
1
2 3
…
37 38