How do i mitigate DDOS attacks on static servers?

Posted by acidzombie24 on Server Fault See other posts from Server Fault or by acidzombie24
Published on 2012-06-03T05:24:01Z Indexed on 2012/06/03 10:42 UTC
Read the original article Hit count: 275

Filed under:

ddos

|

static-content

Here is a slightly different take on DDOS attacks. Rather than a server with dynamic content being attack i was curious how to deal with attacks on servers with STATIC CONTENT. This means cpu tends to not be an issue. Its either bandwidth or connection problems.

How would i mitigate a DDOS attack knowing nothing about the attacker (for example country, ip address or anything else). I was wondering is shorting the timeout and increasing amount of connections is an acceptable solution? Or maybe that is completely useless? Also i would limit the amount of connections per IP address.

Would the above help or be pointless? Keeping in mind everything is static checking for multiple request of the same page (html, css, js, etc) could be a sign of a attack.

What are some measures i can take on a static content server?

© Server Fault or respective owner

Related posts about ddos

How long do DDoS attacks last?

as seen on Server Fault - Search for 'Server Fault'
I realize the answer to this question will vary, which is why I'm asking it. If you've suffered a DDoS attack before - how long did it last? Just trying to get an idea of how long we'll have to continue to wage this battle (going on a couple weeks now). >>> More
DDoS and Heroku

as seen on Server Fault - Search for 'Server Fault'
I use Heroku as my hosting solution. So, if some bad man attacks my site with DDoS, what should I do? >>> More
Brainstorm: Flood/DoS/DDoS Attack prevention ideas.

as seen on Server Fault - Search for 'Server Fault'
This is not a question asking how to stop an attack. This is simply a thread for anyone and everyone to discuss ideas for preventing, dealing with, and keeping your server alive during these attacks. Do not discuss using 3rd party software, this is a place to make your own ideas and read others. Post… >>> More
DDoS and Heroku

as seen on Stack Overflow - Search for 'Stack Overflow'
I use Heroku as my hosting solution. So, if some bad man attacks my site with DDoS, what should I do? >>> More
Anti-DDoS Question

as seen on Server Fault - Search for 'Server Fault'
Our company´s main owner (telecon group) wants us to deploy anti-DDoS mechanisms, such as Arbor Pravail, which is a great idea. Although... I have a question... If our main ISP Backbone provider have no anti-DDoS mechanism, means that there is no point we get the Arbor Pravail? An DDoS attack can… >>> More

Related posts about static-content

Static content on Wicket application served from OSGi HTTP Service

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm developing a web application that is going to be served from an OSGi HTTP service, I register it using a WicketServlet, and I don't know how to serve static files (CSS, JS, images and so). How could I mount a directory as a resource with the static content? Or should I configure the resource… >>> More
Serving static content from cookie less domain and mod_deflate

as seen on Server Fault - Search for 'Server Fault'
I have two domain. One domain with my main website and the other with js/css/etc.. files, static content. mod_deflate is enabled for both domains, but when i run ySlow in FireFox it says none of my static content is compressed. When i bring back the js or css file to my normal domain it gets compressed… >>> More
Serving static content from cookie less domain and mod_deflate

as seen on Stack Overflow - Search for 'Stack Overflow'
I have two domain. One domain with my main website and the other with js/css/etc.. files, static content. mod_deflate is enabled for both domains, but when i run ySlow in FireFox it says none of my static content is compressed. When i bring back the js or css file to my normal domain it gets compressed… >>> More
Intellij + GWT 2: Development Mode ignores changes to static content

as seen on Stack Overflow - Search for 'Stack Overflow'
The new Development Mode in GWT 2 is awesome, but unfortunately as launched from Intellij IDEA 9, it does not seem to notice changes made to static files such as html, css, etc. It immediately see changes in *.java files, but not the static ones. If I make a change in a static file I need to quite… >>> More
Optimized throughput of static content from app server

as seen on Stack Overflow - Search for 'Stack Overflow'
I am building a small web application that primarily needs to serve up protected static content -- some flash (.swf) files 20MB -- from an application server (Websphere) that is front ended by a web server (Apache). Are there there any Websphere configuration settings that I should consider to optimized… >>> More