How do you protect your <appid>.appspot.com domain from DDOS attack?
- by jacob
If I want to use CloudFlare to help protect my GAE app via it's custom domain, I still am vulnerable to attacks directly on the .appspot.com domain. How do I mitigate that? I could force redirect appspot.com host requests, such as discussed here:
http://stackoverflow.com/questions/1364733/block-requests-from-appspot-com-and-force-custom-domain-in-google-app-engine/
But I would still suffer the load of processing the redirect in my app. Are there any other solutions?