Shulou(Shulou.com)06/01 Report--

This article mainly explains "what are the methods of ddos defense". The content of the explanation is simple and clear, and it is easy to learn and understand. Please follow the editor's train of thought to study and learn "what are the methods of ddos defense"?

Understanding of ddos protection:

Resisting ddos is a systematic project. It is unrealistic to rely solely on a certain system or commodity to prevent ddos. It is certain that it is impossible to completely eradicate ddos, but it is possible to resist 90% of ddos attacks through appropriate methods. According to the cost of both attack and defense, if the ability to resist ddos is enhanced by appropriate methods, it means that the attack cost of the attacker will be increased. Then the vast majority of attackers will be unable to continue and abandon, which is equivalent to successfully resisting ddos attacks.

1. Enhance the TCP/IP of the operating system

As a server operating system, Win2000 and Win2003 themselves have a certain ability to resist ddos attacks, but they are not open in the state of acquiescence. If they are open, they can resist about 10000 SYN attack packets, and if they are not open, they can only resist hundreds. For details of how to open, go to Microsoft's article "strengthen TCP/IP stack security".

2. Device professional anti-ddos firewall

3. Other protective measures

The above opposing ddos claims that it is suitable for the vast majority of users with their own hosts, but assuming that they still cannot solve the ddos problem after adopting the above methods, it will be troublesome. It may require more investment, increase the number of servers and choose DNS round-robin or load balancing skills, or even purchase layer-7 switch equipment, so that anti-ddos attacks can be improved exponentially, and only funding is needed to meet deepening.

Thank you for your reading. The above is the content of "what are the methods of ddos defense?" after the study of this article, I believe you have a deeper understanding of the methods of ddos defense, and the specific use needs to be verified in practice. Here is, the editor will push for you more related knowledge points of the article, welcome to follow!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.