Viewing profile — krizhanovsky

Hi HN, DDoS attacks are becomeing larger and cheaper to launch, so we work on a scalable open source solution to mitigate them. Tempesta xFW's core is XDP and TC eBPF programs impl…

Hi, thank you! Yes, xFW can be coupled with Tempesta FW ( https://github.com/tempesta-tech/tempesta ) and WebShield ( https://github.com/tempesta-tech/webshield ) to provide full L…

Hi HN, DDoS attacks are becomeing larger and cheaper to launch, so we work on a scalable open source solution to mitigate them. Tempesta xFW's core is XDP and TC eBPF programs impl…

Most open-source L7 DDoS mitigation and bot-protection approaches rely on challenges (e.g., CAPTCHA or JavaScript proof-of-work) or static rules based on the User-Agent, Referer, o…

It's useful to store a web server access logs in an analytics database, e.g. to fight against bot attacks. We store structured access logs in Clickhouse, which is already good, but…

uRPF prevents IP spoofing used in volumetric DDoS attacks. However, it seems uRPF is vulnerable to route hijacking on its own

This is quite insightful, thank you. This particular project, WebShield, is simple and it didn't take too long to develop. Basically, with this project we're trying to figure out w…

That's a good advice, thank you. In our approach we do our best to not to affect user experience. E.g. consider an example of a company website with a blog. The company does it's b…

Hi, thank you for the reply! You can read about JA5 at https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b... . But the thing is that the hashes were just inspired by the …

This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so o…

Last days there are DDoS attacks against many Russian resources (news, banking, government). The interesting point is that the attacks (at least some of them, e.g. against rbc.ru) …