Skip to content
This repository has been archived by the owner on Feb 12, 2024. It is now read-only.
aufi edited this page Feb 14, 2012 · 14 revisions

FAQ

What would ANDDOS solve and what not?

It should restrict DDOS attacks on HTTP level. So it proceeds HTTP request on a webserver/proxy and declines "bad" ones. It does not provide protection on lower layers (IP, TCP, ..), which should be solved elsewhere.

Why is the filter implemented as a nginx module?

Because it is quite fast and nginx provides many useful functions.

Does ANDDOS use a behavioral approach?

Yes. It proceeds requests distribution etc. beside of an absolute number of requests. And an algorithm can learn from a traffic.

Behavioral filtering is buzzword, because non-behavioral approaches have no future.

Clone this wiki locally