Bonjour personne géniale,
using Cloudflare myself for my blog and my overall interest in DDoS protection draw me to this weeks paper. It discusses a design of an overlay network for DDoS protection. Quite interesting to learn about the considerations coming into play. Sure Cloudflare, Akamai, Google etc. evolved since then, but this paper gives quite nice fundamentals on how to design such a protection. Especially the computation powered puzzles is a nice concept (was programming one on the weekend actually)….most like Bitcoins proof of work 😉
Software exists to create business value
I am Simon Frey, the author of the Weekly CS Paper Newsletter. And I have great news: You can work with me
As CTO as a Service, I will help you choose the right technology for your company, build up your team and be a deeply technical sparring partner for your product development strategy.
Checkout my website simon-frey.com to learn more or directly contact me via the button below.
Abstract:
We present the design and implementation of OverDoSe, an overlay network offering generic DDoS protection for targeted sites. OverDoSe clients and servers are isolated at the IP level.Overlay nodes route packets between a client and a server, and regulate traffic according to the server’s instructions. Through the use of light-weight security primitives, OverDoSe achieves resilience against compromised overlay nodes with a minimal performance overhead. OverDoSe can be deployed by a single ISP who wishes to offer DDoS protection as a value-adding service to its customers
Download Link:
http://ra.adm.cs.cmu.edu/anon/home/ftp/usr0/anon/2006/CMU-CS-06-114.pdf