DDoS

Definition

A Distributed Denial of Service (DDoS) attack is a malicious attempt to disrupt the normal functioning of a targeted server, service, or network by overwhelming it with a flood of internet traffic. This is achieved by using multiple compromised computer systems as sources of attack traffic, often forming a botnet. The goal is to exhaust the target’s resources, making it unavailable to legitimate users.

Secure Settings Example

# Example of a Cloudflare DDoS protection configuration
firewall:
  rules:
    - action: block
      expression: "(http.request.uri.path contains '/login') and (ip.geoip.country ne 'US')"
  ddos_protection:
    enabled: true
    sensitivity: high
    mitigation_mode: challenge

Insecure Settings Example

# Example of an insecure configuration with no DDoS protection
firewall:
  rules: []
ddos_protection:
  enabled: false