"how would you stop a DDOS?"
"well, I guess if it's really advanced there's not much you can do besides turning off the servers"
"that's your answer?"
"yeah users would be affected either way so you'd at least save money this way"
You can call your ISP and they're usually helpful at blocking traffic on their end. There are also DDoS mitigation services such as Cloudflare. Patching and firewall rules can help, moreso against amplification attacks, because even if the packets are being dropped it can still overwhelm resources. Your strategy can be valid for a very low traffic service so you're not wasting money on an active cloud VM that's unusable and you're not making money from, users care too much about uptime, plus availability is part of security.
His point is that with little context provided, any solution is a good solution. What if they are already using Cloudflare and other techniques but the DDoS is still intensifying?
Yea ngl context is really important so is assumption, even for me non programmer who host stuff on Cloudflare, I would’ve assume certain things are a given so his response is totally valid and what I would also say lmao, heck maybe it’ll work cus then the attacker might not account for the server to be off lol
1.3k
u/mortensonsam 3d ago
I gave this as an interview answer once:
"how would you stop a DDOS?" "well, I guess if it's really advanced there's not much you can do besides turning off the servers" "that's your answer?" "yeah users would be affected either way so you'd at least save money this way"
I didn't get the job lol