Apart from captcha to validate a session, having a DDOS-protected vps what other method can be used to protect a service from a DDOS attack?
I recently published a TryHackMe (in spite of denigrating comments coming from skids) I tried to protect it with 2 captcha systems, a simple one that asks you to perform a calculation and the second to validate a shape 3 times in a row on an image, this is very basic I did it in a few hours I don't think it's effective against a DDOS but apart from that I don't see what to put in place.
TryHackMe : http://ucobgig2pbd7vqvge7xiyowk25ryphbzmnq2hjpbchzytyqtnp26jvqd.onion
TryHackMe Post : http://tforum.pro/post/ce63eb99cb3896e44992
Have you remembered to enable PoW in torrc?
While this will not protect completely, it'll certainly help.
While this will not protect completely, it'll certainly help.
Tor's POW protects against introduction cell attacks and puts the load back onto the attacker on that end. But it doesn't solve application-level request based DDOS issues
So : POW + Endgame + hard captcha like image
would that be enough to avoid DDOS attacks?
would that be enough to avoid DDOS attacks?
That's the idea, but it can depend a lot on what resources the attacker has.