-
Notifications
You must be signed in to change notification settings - Fork 30
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #222 from markus-gsf-seidl/feature/ddos-protection
Azure WAF Use DDoS Protection
- Loading branch information
Showing
1 changed file
with
42 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,42 @@ | ||
--- | ||
version: 1.0 | ||
submitted_by: markus-ntt-seidl | ||
published_date: TBD | ||
category: cloud | ||
description: [PATTERN_DESCRIPTION_METADATA] | ||
tags: | ||
- cloud | ||
- size:small | ||
--- | ||
|
||
# Use DDoS protection | ||
|
||
## Description | ||
|
||
Distributed Denial of Service (DDoS) is used to increase the load of server in a way, that they are unable to respond to any legitimate requests. This is mostly done to harm the owner of the service or hardware. | ||
Due to the nature of attack, a lot of environmental resources are used up by nonsensical requests. | ||
|
||
## Solution | ||
|
||
All cloud providers provide some form of DDoS protection (AWS Shield, Azure DDoS Protection, GCP DDoS Protection, CloudFlare, ...) that can prevent those attacks. | ||
|
||
## SCI Impact | ||
|
||
`SCI = (E * I) + M per R` | ||
[Software Carbon Intensity Spec](https://grnsft.org/sci) | ||
|
||
This pattern affects the SCI as follows: | ||
|
||
- `R`: The amount of requests will be reduced, due to not fulfilling DDoS requests | ||
|
||
## Assumptions | ||
|
||
- Assumes that the budget of the project can afford the costs for the DDoS protection service | ||
|
||
## Considerations | ||
|
||
- Consider purchasing the advanced protection tiers of the cloud providers to be fully protected against similar DDoS attack patterns | ||
|
||
## References | ||
|
||
- [Azure Well-Architected Framework Sustainability Pillar](https://learn.microsoft.com/en-us/azure/architecture/framework/sustainability/sustainability-application-design) |