Protection implemented by Bold BI to prevent DDoS attacks?
Distributed Denial of Service (DDoS) attacks can be a significant threat to any internet-accessible service. Bold BI takes several measures to ensure the protection of its services from such attacks. This article outlines the various layers of protection implemented by Bold BI to prevent DDoS attacks.
In Application Layer
Input Validation
Bold BI ensures that all user inputs are validated and sanitized to prevent malicious traffic from entering the system. This helps in mitigating the risk of DDoS attacks at the application level.
Caching
Bold BI uses caching techniques to reduce the load on the server and respond to repeated requests quickly. This helps in minimizing the impact of excessive traffic on the system.
Rate Limiting
Currently, Bold BI does not have a rate limiting feature to control the rate at which requests are processed. However, this is an area that can be considered for future improvements.
In Network/Environment Layer
Bold BI secures its AWS ECS infrastructure using the following concepts:
- Application Load Balancer: This helps in distributing incoming traffic across multiple targets, ensuring that no single target is overwhelmed by excessive traffic.
- Auto Scaling: This feature allows the system to automatically adjust its capacity to maintain steady and predictable performance at the lowest possible cost.
- Application Firewall and Custom VPC: Bold BI uses an application firewall and custom Virtual Private Cloud (VPC) to provide an additional layer of security to the infrastructure.
- SSL: Secure Socket Layer (SSL) encryption is used to protect data transmitted between the client and the server, ensuring that any intercepted data remains unreadable.
Additional References
