undefined | Better HN

0 pointstcp_handshaker9d ago0 comments

It seems Ubuntu infra is hosted at cloud provider? All have the mechanisms to protect from these types of attacks. Is this an architecure design failure?

0 comments

loloquwowndueo9d ago

Which cloud provider? Unless things have changed, Canonical runs their own servers by leasing racks in data centres. Since one of their main offerings is managed Openstack, they favor running things on their in-house openstack deployment instead of using a public cloud (AWS etc).

esseph9d ago

If the DDoS is from residential proxies and high volume it becomes a real problem to shut down.

pixel_popping8d ago

It can't be shutdown if the means are there, if the means are superior from the attacker than the target, then it can remain permanently offline. Talking from experience.

esseph8d ago

I have personally been involved with law enforcement in foreign countries that have raided houses with shotguns and flash bangs against Command and Control (C2) infra.

BGP FlowSpec helps a lot to prevent shunting the target IP/route completely, it's not as bad as the old days.

j / k navigate · click thread line to collapse