If I read this right, you're telling me that anyone can DOS your CDN by making a lot of requests with bogus User-Agent strings (which, incidentally, was one of my guesses). Forget CloudFlare for a moment. You aren't the least bit concerned about that?
Or are you saying that you filter User-Agents to ensure that you only give Google "safe" ones. Are you sure you got them all? Sure enough that you won't mind having to write an apology letter to your biggest customer explaining what went wrong and what you are changing so that it never happens again? Like I just did? Jeff On Wed, Aug 1, 2012 at 5:58 PM, Drake <[email protected]> wrote: > Here from when I was working with the guys at Google about proxying requests > when I was consulting for Akamai. > > Your requests will be blocked if you cross a thresh hold of requests that > meet the following criteria. > > > PROXY reports request on behalf of Google Internal IP address. (or any IP > assigned to Google) (CF does this a lot) > You can check that. > > PROXY Reports Request on behalf of a session/token which has expired. (CF > does this a lot) > You can check that. > > PROXY reports request on behalf of invalid IP. (octet missing) > You can check that. > > PROXY reports request on behalf of invalid IP. (127 or 169 address range) > (CF does this a lot) > You can check that. > > PROXY Requests SLURPbot on behalf of non-Yahoo IP Address. (CF does this a > lot) > You can check that. > > PROXY made request on behalf of User Agent which is unavailable on platform > indicated in the request. (CF does this a lot) > You can check that. > > > > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
