Shulou(Shulou.com)05/31 Report--

Today, the editor will share with you the relevant knowledge points about DDOS attack defense methods, which are detailed in content and clear in logic. I believe most people still know too much about this knowledge, so share this article for your reference. I hope you can get something after reading this article. Let's take a look at it.

First, take a look at the common attack methods of DDOS.

1: attack bandwidth

Attackers send a large number of packets to fill the bandwidth of the attacked network, causing normal requests not to be processed, such as ICMP flood attacks, UDP flood attacks, and the use of fake source IP.

2: attack the system

The attacker uses the controlled host to establish a large number of TCP connections with the attacker, which makes the TCP connection table full and unable to receive new TCP connections normally, such as TCP SYN messages.

3: attack the application

The most common attack methods at present

The attacker sends a large amount of data to the application server in the victim's network, consuming resources

For example, send a large number of queries to the DNS server, each domain name information is not the same, so as to effectively avoid the cache mechanism, achieve the purpose of consuming DNS service resources, resulting in the normal operation of DNS service.

The attacker sends a large number of malicious HTTP requests to the WEB server in the attacked network, which takes up resources and makes it impossible to establish normal user access.

4: mixed attack

UDP reflective and large traffic attacks, multi-protocol small traffic slow attacks

Where there is attack, there is defense.

Yes, it must need to be defended.

Current Defense methods of DDOS

1: purchase high defense DDOS equipment

2: set up high-performance devices (routers, switches, firewalls)

3: hardware upgrade, abnormal traffic cleaning

Filtering and cleaning abnormal flow

4: turn WEB into a static page

5: distributed cluster defense

These are all the contents of this article entitled "what are the ways to defend against DDOS attacks?" Thank you for reading! I believe you will gain a lot after reading this article. The editor will update different knowledge for you every day. If you want to learn more knowledge, please pay attention to the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.