Please enable JavaScript.

Coggle requires JavaScript to display documents.

DDoS (Attacks (DNS Flood (Layer 7, Less common, many to one recursive…

- - - - Quick scale up and down of resources
      - Each region has seperate internet connections
    - - Scale horz to absorb (user not charged)
      - ELB will filter bad tcp connections
      - ELB will provide an element of DDoS
    - - CFn only accepts well formed requests
      - DDoS are typically goe close to attach
    - - R53 is resilient and scalable
    - - CFrnt will close slow loris attack connections
      - WAF will filter attack of app layer
      - CFrnt can white\black list country allowing quick response
    - - Scale via ELB
      - Secure at all levels
    - - Use lambda to update orgin to onfly CFn
      - Use x-shared-security headers to help validate requests