Problem
After a site goes live, sooner or later it will face DDoS attacks. Below is a summary of common DDoS protection techniques that can be implemented in a proxy server or API gateway.
Geo restriction
Based on the request IP's geo region, only allow specific countries to access the site.
Rate limiting
When the same IP makes more than 150 requests within one minute, extend the response delay for any further requests.
Request encryption
Inject a specific value into the request header. Only requests carrying the designated header are allowed. This helps block bots.
Blocklist
IPs on the blocklist are forbidden from accessing the site.
Allowlist
A safelist mechanism to prevent false positives.
Block specific request characters
Reject requests containing illegal/malicious keywords.
Comments