On Thu, Aug 9, 2012 at 12:48 PM, Kate <[email protected]> wrote: > I will have a go and then I will have to give up on google apps. I am very > surprised they allow dos attacks. No web provider has allowed this to > happen before. >
You probably have just been lucky. ddos attacks are actully pretty rare, so its never been an issue before. Very few providers are proactive about blocking. Many will just throw you out (sadly). The design of AppEngine, does make it hard to block the requests before hitting instances. On other providers maybe could of used something like rewrite rules to block them before they hit dynamic instances (like php). But also the different way of paying (many providers only charge for bandwidth and/or requests) means the instance time adds up, which woudlnt be a problem elsewhere. Something not sure if been mentioned before is Google do have a means to contact them to be reimbused for changes assocated with a DOS https://developers.google.com/appengine/kb/billing#dos Have you tried that? One final thing, it might not actully be a deliberate dos. It might just be a misbehavioed crawler. Its getting stuck in a loop, on your error messages - it doesnt expect a HEAD to fail, so its just retrying. Hence the suggestion to actully handle head requests in the first place. (although at the time didnt appreciate how many of these requests you getting) Turning them into 200 OK, might cause them to go away satisfied. Couple it with Cache-Control headers, to allow the Google edge cache to cache the requests, means the edgecache might be able to forfil the requests without touching dynamic instances. > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To view this discussion on the web visit > https://groups.google.com/d/msg/google-appengine/-/0RfQ_4DZg3oJ. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. > > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
