How does Jiangsu BGP machine room cabinet website server resist HTTP/cc attacks? Jiangsu BGP machine room Cabinet website The server How to resist HTTP/cc attacks? The server hosting users is most concerned about network attacks. At present, the most common attack is against bandwidth. In order to reduce the impact of attacks, users must constantly purchase bandwidth to reduce the impact. In fact, for CC attack users, if you start from the source, you can effectively improve the protection effect. CC attack is an attack on Web services in Layer 7 protocol. Compared with the other three layers and four layers, the attacker does not need to control a large number of broilers. Instead, they use port scanners to search the Internet for anonymous HTTP or socks proxies. An attacker sends an HTTP request to the target through an anonymous proxy. Anonymous proxy servers exist widely on the Internet. Therefore, the attack is easy to launch, and can maintain long-term high-intensity continuous attacks. It can also hide the source of the attacker to avoid being tracked. Now let's take the Micronet to analyze it.
Features of HTTP/cc attacks:
1. HTTP/cc attack IP is real and distributed
2. HTTP/cc attack packet is normal
3. All http/cc attack requests are valid and cannot be rejected
4. Http/cc attacks web pages. The server can be connected and pinging is normal, but the web page cannot be accessed
5. If IIS is turned on, the server will die soon and the data packet will be lost easily
6. Like DNS services, web services also have caching mechanisms. If an attacker's large number of requests hit the server cache, the main effect of this attack is only reflected in the consumption of network bandwidth resources, which is very limited for the consumption of computing and IO resources.
Therefore, efficient http/cc attacks should constantly send http requests for different resources and pages, and try to request resources that cannot be cached (such as keyword search results, user related information, etc.), so as to better increase the burden of the server and achieve the desired attack effect.
Of course, http/cc attacks will also cause serious chain reactions, which will not only directly lead to slow response to Web front-end attacks, but also indirectly attack business layer logic such as back-end Java and more back-end database services, increasing their pressure. The massive log data generated by HTTP/cc attacks will even affect the log storage server. If the web server supports HTTPS, HTTPS flood attack is a more effective way. There are two reasons. First, when communicating with HTTPS, the web server needs to consume more resources for authentication and encryption. Secondly, at present, some protection devices cannot handle HTTPS communication data streams, leading to attack traffic bypassing the protection device and directly attacking the web server.
How does Jiangsu BGP machine room cabinet website server resist HTTP/cc attacks? The defense against HTTP/cc attacks is mainly achieved through caching. The background business is protected by the direct return results of the device cache as much as possible. When an advanced attacker invades the cache, the cleaning device will intercept HTTP requests for special processing. The early method was to set a threshold for the HTTP request frequency of the source IP, and add IP addresses higher than this threshold to the blacklist. This method is too simple, easy to kill by mistake, and unable to shield proxy server attacks, so it is gradually abolished and replaced by a human-computer recognition scheme based on JavaScript jump. HTTP Flood is a program that simulates HTTP requests. Generally speaking, it does not parse the data returned by the server, nor does it parse JS and other codes. Therefore, when the cleaning device intercepts an HTTP request, it will return a special JavaScript code. Normal users' browsers will process and jump normally without affecting their use, and attackers will attack the blank space. Because the disguise of HTTP/cc attacks is ever-changing, few strategies or hardware protection can achieve perfect removal. Therefore, for HTTP/cc attacks, we need network maintenance personnel with certain skills to make open calls and open calls in most cases.
The above is how the Jiangsu BGP machine room cabinet website server can resist HTTP/cc attacks, which Micronet has analyzed for you. I hope it can help you. Micron network server Cloud virtual machine space Leasing, rapid deployment, multiple line options, support for partitioned dedicated lines T-class bandwidth can provide better quality IDC services. Micronet is an IDC service provider focusing on server and cabinet rental and hosting. With more than 10 years of industry experience, it is safe, stable, reliable and reassuring. It is a leading enterprise in the domestic IDC industry. It helps thousands of enterprises to achieve network informatization, 7 * 24 hours of manual service, and has a good reputation after sales.
Jiangsu BGP machine room: hopechilam.com
