Tempesta: a framework for HTTP DDoS attacks mitigation
Alexander Krizhanovsky · Computer Science and Software Engineering · 2014
Modern application layer HTTP DDoS attacks employ complex techniques that make them difficult to detect. So modern DDoS defense approaches are also based on sophisticated methods to classify HTTP requests. Usually, these methods require exhaustive data on user activity from different layers of protocol stack, mainly from network, transport and application layers. Moreover, a typical DDoS attack puts a huge load onto a target Web cluster. That demands a DDoS mitigation solution that delivers higher performance and is able to significantly reduce the load on defended back-end systems. In this article we present Tempesta, a hybrid solution that combines a caching HTTP server and a firewall in one. It accelerates Web applications much efficiently than traditional Web accelerators and provides a high performance framework that offers easy access to data from all protocol layers. That facilitates the development and use of sophisticated DDoS classification and blocking algorithms.