Preventing DDoS attacks

To prevent and mitigate DDoS attacks, DX Cloud grants all customers (using Fastly as their CDN):

• Access to origin shielding

  Origin shielding is designed to reduce the load on an origin server by centralizing cache fill operations to a limited set of CDN locations. For more details, see Shielding.

• Automatic resistance to availability attacks

• Access to Fastly cache IP space

• Custom DDoS filter creation abilities

Block IP address with ingress

1. If you are using Fastly as your CDN in your DX Cloud project, you can block IPs directly from the Cockpit.

2. If you are not using Fastly as your CDN, you’ll need to manually block the dangerous IP in the ingress section of your values.yml file.

Instructions

1. Go to https://ipinfo.io/www.xxx.yyy.zzz (where www.xxx.yyy.zzz is the suspicious IP).

   

2. Update your values.yml file with the following snippet:

kind: Ingress <1>
metadata:
  annotations:
    nginx.ingress.kubernetes.io/server-snippet: deny www.xxx.yyy.zzz; <2>

Specifies the kind Ingress.

Denies the specific IP address.