Skip to content

Commit

Permalink
Merge pull request #222 from markus-gsf-seidl/feature/ddos-protection
Browse files Browse the repository at this point in the history
Azure WAF Use DDoS Protection
  • Loading branch information
russelltrow authored Nov 29, 2023
2 parents 6d773f3 + 6abf0c6 commit 61a66e6
Showing 1 changed file with 42 additions and 0 deletions.
42 changes: 42 additions & 0 deletions docs/catalog/cloud/use-ddos-protection.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,42 @@
---
version: 1.0
submitted_by: markus-ntt-seidl
published_date: TBD
category: cloud
description: [PATTERN_DESCRIPTION_METADATA]
tags:
- cloud
- size:small
---

# Use DDoS protection

## Description

Distributed Denial of Service (DDoS) is used to increase the load of server in a way, that they are unable to respond to any legitimate requests. This is mostly done to harm the owner of the service or hardware.
Due to the nature of attack, a lot of environmental resources are used up by nonsensical requests.

## Solution

All cloud providers provide some form of DDoS protection (AWS Shield, Azure DDoS Protection, GCP DDoS Protection, CloudFlare, ...) that can prevent those attacks.

## SCI Impact

`SCI = (E * I) + M per R`
[Software Carbon Intensity Spec](https://grnsft.org/sci)

This pattern affects the SCI as follows:

- `R`: The amount of requests will be reduced, due to not fulfilling DDoS requests

## Assumptions

- Assumes that the budget of the project can afford the costs for the DDoS protection service

## Considerations

- Consider purchasing the advanced protection tiers of the cloud providers to be fully protected against similar DDoS attack patterns

## References

- [Azure Well-Architected Framework Sustainability Pillar](https://learn.microsoft.com/en-us/azure/architecture/framework/sustainability/sustainability-application-design)

0 comments on commit 61a66e6

Please sign in to comment.