Forums

DDos

why don't you have anti-ddos by default? Are you not worse off from the extra load on your servers?

GLCS | 6 posts | March 1, 2022, 5:35 a.m. | permalink

What do you mean by "anti-ddos by default"?

Staff pafk | 2973 posts | PythonAnywhere staff | March 1, 2022, 10:21 a.m. | permalink

attack detection and request blocking (do not respond to the request and do not transfer to in the user's flask)

GLCS | 6 posts | March 1, 2022, 10:33 a.m. | permalink

We do have service-wide anti-DDoS. We cannot really provide it to our users, because there are so many different usage patterns that detecting a DDoS in the noise would be close to impossible.

Staff glenn | 9498 posts | PythonAnywhere staff | March 1, 2022, 3:40 p.m. | permalink

well, you can define requests of the same type from one ip and block it (with a user-configurable request rate)

GLCS | 6 posts | March 3, 2022, 7:31 a.m. | permalink

We could, but first "D" in DDoS is for "Distributed". It's possible, not easy to implement and of doubtful effectiveness.

Staff fjl | 4352 posts | PythonAnywhere staff | March 3, 2022, 9:28 a.m. | permalink

Distributed, but who prevents when detected to enter the red attack status and block every 2 request similar to (configured number of requests of the same type with ip ), yet ip is not infinite, even for anonymous

GLCS | 6 posts | March 3, 2022, 2:02 p.m. | permalink

Thanks for suggestion.

Staff pafk | 2973 posts | PythonAnywhere staff | March 3, 2022, 5:29 p.m. | permalink

will this feature be implemented? if so, how soon can i participate in the beta test?

Or maybe I can help with the development of this feature?

GLCS | 6 posts | March 3, 2022, 8:47 p.m. | permalink

No, we're currently not planning to implement it.

Staff pafk | 2973 posts | PythonAnywhere staff | March 4, 2022, 9:39 a.m. | permalink