On Thu, Aug 9, 2012 at 12:48 PM, Kate <[email protected]> wrote:

> I will have a go and then I will have to give up on google apps. I am very
> surprised they allow dos attacks. No web provider has allowed this to
> happen before.
>

You probably have just been lucky. ddos attacks are actully pretty rare, so
its never been an issue before. Very  few providers are proactive about
blocking. Many will just throw you out (sadly).


The design of AppEngine, does make it hard to block the requests before
hitting instances. On other providers maybe could of used something like
rewrite rules to block them before they hit dynamic instances (like php).
But also the different way of paying (many providers only charge for
bandwidth and/or requests) means the instance time adds up, which woudlnt
be a problem elsewhere.


Something not sure if been mentioned before is Google do have a means to
contact them to be reimbused for changes assocated with a DOS
https://developers.google.com/appengine/kb/billing#dos

Have you tried that?



One final thing, it might not actully be a deliberate dos. It might just be
a misbehavioed crawler. Its getting stuck in a loop, on your error messages
- it doesnt expect a HEAD to fail, so its just retrying. Hence the
suggestion to actully handle head requests in the first place. (although at
the time didnt appreciate how many of these requests you getting) Turning
them into 200 OK, might cause them to go away satisfied.


Couple it with Cache-Control headers, to allow the Google edge cache to
cache the requests, means the edgecache might be able to forfil the
requests without touching dynamic instances.





>
> --
> You received this message because you are subscribed to the Google Groups
> "Google App Engine" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/google-appengine/-/0RfQ_4DZg3oJ.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected].
> For more options, visit this group at
> http://groups.google.com/group/google-appengine?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.

Reply via email to