Thanks everybody for your suggestions. I will look into them all and try to figure out the best way forward.
>From a functional perspective, I'm not currently looking at a Denial of Service attack (I guess that can only possibly come if I've become very big /successful or if it comes from a nefarious website in which case I can use the DOS.yaml file). I'm more worried about someone signing up for my service and then inexplicably violating the terms and agreements which would then lead me to 'suspending' the person's account from my side. Being that this is a new business/service, I'm trying to make sure that I don't incur any unnecessary expense. In this case, that would be bearing the cost of a suspended client's thousands of users hitting my servers. On Tuesday, December 15, 2015 at 2:39:47 PM UTC-8, NP wrote: > > Hello all, > > I'm working on a design (in python) where my users will embed a piece of > javascript code on their website. This javascript code will call my > application which then provides service to my users. An example of this > approach is signing up for Google Analytics or Google Ads. Google gives you > a piece of javascript code which you embed on your website and when users > load your page, the javascript code calls Google Servers. > > I'm trying to figure out what to do if a user is no longer using my > service but forgets to delete the javascript code from their pages. Is > their a way to prevent such sites from accessing my site without incurring > a hit on my server? The option I can think of right now is to have my code > catch the request and then throttle it but that still involves a hit to my > server and if my client's website is being accessed by thousands of users, > the hits to my server becomes considerable. > I know that Google App engine has a Denial of Service Protection but as > far as I know, this works only for IP address. > > Thanks > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/a3085820-25dd-42a8-b773-a98131b70539%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
