Re: DDOS attack alleviation?

2010-09-30 Thread railsnerd
Just as an aside Does Varnishing as much content as you can protect you from DDOS? It would cover your app backend but is Varnished content on Heroku so heavily cached that it is impenitrable? I assume it must be, since a Reddit attack is as bad as DDOS, and Vanish is what people recommend f

Re: DDOS attack alleviation?

2010-09-29 Thread Al Sargent
Could CloudFlare be helpful here? https://www.cloudflare.com/home.html http://techcrunch.com/2010/09/27/cloudflare-wants-to-be-a-cdn-for-the-masses-and-takes-five-minutes-to-set-up/ On Sep 29, 5:35 am, Alex Killough wrote: > So I feel I've either got a DDOS underway on one of my sites or a   >

Re: DDOS attack alleviation?

2010-09-29 Thread Alex
Alternatively, try using http://datagraph.rubyforge.org/rack-throttle/ to throttle requests. (it's done per client IP I believe, so regular visitors should get their normal requests fine, and repeated spammers will be denied). On Sep 29, 12:19 pm, Alex wrote: > Could you write a rack middlewar

Re: DDOS attack alleviation?

2010-09-29 Thread Alex
Could you write a rack middleware that blocks IPs/domains/url patterns? Rack is blazing fast (at least compared to the rest of your stack) so it should help. On Sep 29, 10:35 am, Alex Killough wrote: > So I feel I've either got a DDOS underway on one of my sites or a   > malicious script sending

Re: DDOS attack alleviation?

2010-09-29 Thread Steve Smith
Well you can defo start with checking your logs on the command line. In terms of blocking traffic though it's something that would have to be done by Heroku. I know you could write some form of rack app as a last resort to quickly shutdown connections but it's not going to be ideal. I know this wo