Open Ask AI (⌘/Ctrl+I)
On this page

Preventing DDoS attacks

To prevent and mitigate DDoS attacks, DX Cloud grants all customers (using Fastly as their CDN):

  • Access to origin shielding

    Origin shielding is designed to reduce the load on an origin server by centralizing cache fill operations to a limited set of CDN locations. For more details, see Shielding.

  • Automatic resistance to availability attacks

  • Access to Fastly cache IP space

  • Custom DDoS filter creation abilities

Block IP address with ingress

Block an IP in Cockpit for Fastly, or on the Ingress deny list otherwise

  1. If you are using Fastly as your CDN in your DX Cloud project, block IPs in the Cockpit. See Block IPs.

  2. If you are not using Fastly, add the address to blacklistIps on the MgnlIngress. Leave ingress.enabled off in values.yml.

Instructions

  1. Go to https://ipinfo.io/www.xxx.yyy.zzz (where www.xxx.yyy.zzz is the suspicious IP).

    ipinfo.io report abuse

  2. Add that address to the deny list on the MgnlIngress. A single IPv4 address takes a /32 suffix. Field names are in Map UI fields to manifest.

spec:
  blacklistIps:
    - 203.0.113.10/32 <1>

Deny List IPs. Requests from these addresses are blocked.