How do you protect your <appid>.appspot.com domain from DDOS attack?

Posted by jacob on Server Fault See other posts from Server Fault or by jacob
Published on 2014-06-12T02:24:37Z Indexed on 2014/06/12 3:27 UTC
Read the original article Hit count: 179

Filed under:

ddos

|

cloudflare

|

google-app-engine

If I want to use CloudFlare to help protect my GAE app via it's custom domain, I still am vulnerable to attacks directly on the .appspot.com domain. How do I mitigate that? I could force redirect appspot.com host requests, such as discussed here:

http://stackoverflow.com/questions/1364733/block-requests-from-appspot-com-and-force-custom-domain-in-google-app-engine/

But I would still suffer the load of processing the redirect in my app. Are there any other solutions?

© Server Fault or respective owner

Related posts about ddos

How long do DDoS attacks last?

as seen on Server Fault - Search for 'Server Fault'
I realize the answer to this question will vary, which is why I'm asking it. If you've suffered a DDoS attack before - how long did it last? Just trying to get an idea of how long we'll have to continue to wage this battle (going on a couple weeks now). >>> More
DDoS and Heroku

as seen on Server Fault - Search for 'Server Fault'
I use Heroku as my hosting solution. So, if some bad man attacks my site with DDoS, what should I do? >>> More
Brainstorm: Flood/DoS/DDoS Attack prevention ideas.

as seen on Server Fault - Search for 'Server Fault'
This is not a question asking how to stop an attack. This is simply a thread for anyone and everyone to discuss ideas for preventing, dealing with, and keeping your server alive during these attacks. Do not discuss using 3rd party software, this is a place to make your own ideas and read others. Post… >>> More
DDoS and Heroku

as seen on Stack Overflow - Search for 'Stack Overflow'
I use Heroku as my hosting solution. So, if some bad man attacks my site with DDoS, what should I do? >>> More
Anti-DDoS Question

as seen on Server Fault - Search for 'Server Fault'
Our company´s main owner (telecon group) wants us to deploy anti-DDoS mechanisms, such as Arbor Pravail, which is a great idea. Although... I have a question... If our main ISP Backbone provider have no anti-DDoS mechanism, means that there is no point we get the Arbor Pravail? An DDoS attack can… >>> More

Related posts about cloudflare

Using dd-wrt Dynamic DNS client with CloudFlare

as seen on Server Fault - Search for 'Server Fault'
I'm trying to configure Dynamic DNS client on my router with dd-wrt (v24-sp2) firmware so it would dynamically change IP address in one of the DNS records. Unfortunately I encountered a problem… Here is an example request from their ddclient configuration: https://www.cloudflare.com/api.html?a=DIUP&u=<my_login>&tkn=<my_token>&ip=<my_ip>&hosts=<my_record>… >>> More
powweb and cloudflare

as seen on Server Fault - Search for 'Server Fault'
i am using powweb as hosting provider and cloudflare as free cdn. Its been few weeks since my website is down and it says "website down, no cache version available". And to add more to it, I cannot access powweb or any website hosted from powweb from my ISP connection. So i am facing trouble solving… >>> More
fail2ban with Cloudflare

as seen on Server Fault - Search for 'Server Fault'
I'm using fail2ban to block web vulnerability scanners. It is working correctly when visiting the site if CloudFlare is bypassed, but a user can still access it if going through it. I have mod_cloudflare installed. Is it possible to block users with IPtables when using Cloudflare? Ubuntu Server… >>> More
Passing all traffic through Cloudflare

as seen on Server Fault - Search for 'Server Fault'
I am new to Linux System Administration and I am experimenting with iptables trying to learn how to really lock down a system with them. And one thing a friend of mine recommended was that there was a way to pass all incoming traffic through Cloudflare so even if attackers resolved the server ip they… >>> More
cloudflare's mx record should set cname or A records

as seen on Pro Webmasters - Search for 'Pro Webmasters'
The cloudflare offical support said https://support.cloudflare.com/hc/en-us/articles/200168876-My-email-or-mail-stopped-working-What-should-I-do- But traditionally mx record should not set as cname http://www.exchangepedia.com/blog/2006/12/should-mx-record-point-to-cname-records.html But cloudflare… >>> More