• About
  • Contact
  • Privacy Policy
  • Terms and Conditions
Friday, May 9, 2025
The VR Soldier
  • Featured
  • News
  • Education
  • NEAR Protocol
  • Solana
  • Fantom
  • Yield Farming
  • Reviews
  • Press Releases
No Result
View All Result
  • Featured
  • News
  • Education
  • NEAR Protocol
  • Solana
  • Fantom
  • Yield Farming
  • Reviews
  • Press Releases
No Result
View All Result
The VR Soldier
No Result
View All Result

How to Mitigate a Layer-7 DDOS Attack Using Cloudflare

margin707 by margin707
November 20, 2021
in Education
Reading Time: 3 mins read
0
layer-7 ddos
17
SHARES
Share on TwitterShare on Facebook

After recently exposing a cryptocurrency scam, our website has been getting hit with daily DDOS attacks. The attacks send millions of requests to our origin server, temporarily crashing it. In this article, I will explain how to identify and mitigate against a Layer-7 HTTP Flood DDOS attack using Cloudflare.

What is a Layer-7 DDOS Attack?

Layer-7 is the application layer in our network stack. This is where user interaction happens on the web, such as clicking links, typing in the search bar, etc.

A Layer-7 DDOS attack, means the attackers are using the application layer to overwhelm the system and ultimately crash the servers.

How to Identify a Layer-7 DDOS Attack?

The easiest way to identify a Layer-7 DDOS attack is by taking a look at your server access logs. In our case, we saw a huge amount of requests coming in a short period of time. After awhile, the server couldn’t keep up and started returning 404 errors.

Huh token is back at it trying to DDOS us. Who knew exposing crypto scams would be so much fun! https://t.co/nYxlpVKo4s pic.twitter.com/Htfevhqw0N

— The VR Soldier (@thevrsoldier) November 17, 2021

How to Mitigate a Layer-7 DDOS Attack?

The best way to mitigate against a Layer-7 DDOS attack is by enabling caching for incoming requests using Cloudflare.

In our case, since all the requests were going to our homepage. We created a page rule that cached every request on our site.

cloudflare http flood ddos

You can check if Cloudflare is caching your pages by using curl in your windows shell.

curl -svo /dev/null https://thevrsoldier.com/

Will return:

cloudflare curl

CF-Cache-Status: HIT

A status of HIT means that the url was served via Cloudflare’s cache, meaning your origin server never has to deal with the request.

In the chart below, you can see that adding the page rule successfully mitigated the latest DDOS attack. The peaks are when our servers were being hit with millions of requests. The blue bar represents the amount of requests our origin server had to respond to. The orange bar represents how many requests Cloudflare responded to.

cloudflare http ddos

As you can see, at 3:00, Cloudflare served over 2M requests, buffering all the traffic to our servers. In previous attacks, the DDOS was bypassing Cloudflare’s cache because we didn’t have the page rule enabled.

Conclusion

Being hit with DDOS attacks can be frustrating and unpleasant to deal with. However, with the right tools one can mitigate against even the most sophisticated DDOS attacks.

For a basic Layer-7 DDOS, setting a more aggressive cache on your servers is the easiest solution. Thankfully, Cloudflare makes it easy to adjust your cache settings on the fly, making it easy to respond to most forms DDOS attacks.

Follow us on twitter @thevrsoldier to stay up to date with the latest cryptocurrency news!

Previous Post

Powerledger Price Up 23% As More Partnerships Are Brewing

Next Post

Top 15 Metaverse Coins With a Unit Price of Under $1

Related Posts

elon-musks-twitter-location-sparks-speculation-dogecoin-price
News

Elon Musk’s Tesla Adds Dogecoin As Payment Method, DOGE Soars 20%

May 4, 2024
Squid Router
Education

How to Make Cross-Chain Swaps Easy with Squid Router

February 5, 2024
Beefy Finance
Education

Learn How To Use Beefy Finance For Passive Income

February 7, 2024
Education

DefiLlama DEX Aggregator: Mastering Crypto Trading

January 28, 2024
thevrsolider-1-inch-guid.webp
Education

1Inch DeFi Trading: The Ultimate Guide To Dex Aggregators

January 28, 2024
Education

How To Accept Cryptocurrency Payments For Your Business

October 18, 2023

Press Releases

News

State Bitcoin Bills Collapse, NC Moves Ahead

by Jordan Avery
May 6, 2025

Introduction Florida’s once-ambitious attempt to weave Bitcoin into its treasury operations has ended with barely a ripple. The state's proposed...

Read more

Bitcoin After $97K: 3 Possible Paths

May 2, 2025
WLFI Raises $1B Backed by Trump What's Next

WLFI Raises $1B Backed by Trump What’s Next?

April 29, 2025

Bitcoin for $108K as Bulls Regain Control

April 28, 2025

TRUMP Bulls Eye $21 What’s Next?

April 26, 2025
The VR Soldier

© 2024 The VR Soldier

Navigate Site

  • About
  • Contact
  • Privacy Policy
  • Terms and Conditions

Follow Us

No Result
View All Result
  • Featured
  • News
  • Education
  • NEAR Protocol
  • Solana
  • Fantom
  • Yield Farming
  • Reviews
  • Press Releases

© 2024 The VR Soldier