/tech/ - Technology★

A few virtual servers with honest gigabit as caching proxies here and there connected to a central server over VPN. There is no true "Non-Pozzed" way of doing (D)DoS protection because of how computer networks are designed. Https is not really needed to be honest, not for public content, but in fact it only needs a way of signing information, so that client software and user would get proof of validity. We have to invent a system to receive central server's keys proxied through caching servers while keeping the load low on the main server, and then fetching signed bulk content from distributed swarm of caching servers. It's not possible with traditional networks, but some alternatives like GNUNet are working in the right direction.

>>858360

>Https is not really needed

Anything you post can be edited. Anything you request can be edited.

Using asymmetric encryption to sign http requests is retarded

>>858364

Anything you post to a server with DDoS protection can be edited by anyone who has access to edge servers. HTTPS won't save you.

>>858365

It can be done at the TCP level. Cloudflare has a mode that is end to end encrypted no keys required for them.

>>858365

DDoS protection can work below HTTP/S and you can keep your traffic encrypted, you dumb nigger

I was asking if anyone could recommend a good service for this. Fuck CDNs.

>>858354 (OP)

Just be like OVH and by a gorrilion dollar firewall to prevent ddos attacks. MITM is not the only solution.

When I was like 15, I made the backend for a "ddos protection" service which just setup a ipfilter rule to redirect the traffic to their machine. I even made a whmcs module for it. Since I was a kid the owner was able to get me to make the whole system for free.

>>858404

I'm more worried about massive crapfloods that choke the connection than bots trying to open tons of connections

ip=127.0.0.1

ip_is_banned=true

if $ip_is_banned; then

echo "go the fuck away nigger"

fi

Boom. DDoS free. You're welcome.

>>858926

>ip_is_banned

found the nigger admin who blocks tor exits

>>858955

There are 3 possibilities that allow sites to function

- Ban exit nodes

- Captcha every site load

- Cross site tracking recording everything you do online

Pick one they are all shitty

>>858354 (OP)

Use BitTorrent? Upload your site to the Internet Archive?

Come on lad get creative.