Shulou(Shulou.com)06/01 Report--

This article mainly introduces "what are the ddos attack defense methods". In the daily operation, I believe many people have doubts about the ddos attack defense methods. The editor consulted all kinds of materials and sorted out simple and easy-to-use operation methods. I hope it will be helpful for you to answer the doubts about "what are the ddos attack defense methods?" Next, please follow the editor to study!

What is the defense method of ddos? ddos attack is a possible attack in the process of using the Internet. Ddos attack has low cost, but it is destructive and aggressive, which is often used by hackers to attack the Internet. What should we do when we encounter a ddos attack? This paper summarizes several ddos defense methods for you.

Understanding of ddos protection:

Resisting ddos is a systematic project. It is unrealistic to rely solely on a certain system or commodity to prevent ddos. It is certain that it is impossible to completely eradicate ddos, but it is possible to resist 90% of ddos attacks through appropriate methods. According to the cost of both attack and defense, if the ability to resist ddos is enhanced by appropriate methods, it means that the attack cost of the attacker will be increased. Then the vast majority of attackers will be unable to continue and abandon, which is equivalent to successfully resisting ddos attacks.

1. Upgrade the host server hardware

Under the premise of ensuring network bandwidth, please improve your hardware equipment as much as possible. If you want to be useful against 100000 SYN attack packets per second, the key thing to play is CPU and memory. Memory must be selected for high-speed memory. The hard disk should be selected for SCSI as far as possible, and don't only be greedy for IDE prices, otherwise it will not provide high functional value.

2. Turn the website into a static page

Many facts have proved that turning a website into a static page as much as possible can not only greatly improve the ability to resist attacks, but also bring a lot of trouble to hackers. At least so far, the overflow of HTML has not been shown. Take a look! Sina, Sohu, NetEase and other portals are mainly static pages. If you do not need dynamic script calls, then get it to another separate host, so as not to involve the main server in case of attack. Of course, it is still possible to put some scripts that do not call the database. In addition, it is best to deny access to the agent in the scripts that call the database. Experience has shown that 80% of using agents to visit your website is attributed to malicious practices.

At this point, the study of "what are the ways to defend against ddos attacks" is over. I hope to be able to solve your doubts. The collocation of theory and practice can better help you learn, go and try it! If you want to continue to learn more related knowledge, please continue to follow the website, the editor will continue to work hard to bring you more practical articles!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.