Photo

How to make your network application vulnerable to DDoS attacks in CDN era

Ivan Koveshnikov

from Gcore (Luxembourg)

About speaker

Computer networking enthusiast. Fell in love with computer networks at university, worked on software for managed switches and software routers, bootloaders, Linux kernel networking, HTTP servers and eBPF DDoS protection systems.

About speakers company

Gcore accelerates AI training, provides comprehensive cloud services, improves content delivery, and protects servers and applications.

Abstracts

specific

The beginning of CDN era has changed the landscape of HTTP applications. Although the necessity of exposing a part of the traffic to middleware companies erupted in severe discussions in social networks, their ability to provide wide networking channels and serve many more users was unquestionable. Spreading across the globe, CDN networks have changed the design of network applications, forcing developers to care about proxying and caching layers between the backend server and the client endpoints.

But this continental drift hasn't affected the landscape of other networking applications. Many networking applications are not ready for DDoS attacks, and the possibilities to offload the protection for some of them are minimal, resulting in either covering only a couple of attack vectors or very basic filtering from random floods.

In this talk, I will focus on topics that allow offloading L7 DDoS protection for your networking applications or games, taking advantage of the almost unlimited bandwidth of IaaS companies, and leveraging their infrastructure to cover most of the risks. I will show how the evolution of applications and the choices made in the beginning resulted in the current state of some applications or games you may know. I will give some advice on how to effectively ruin an application's ability to withstand L7 DDoS attacks.

The Program Committee has not yet taken a decision on this talk

other talks of this topic

Photo
Just Use Postgres for Everything

Giorgi Dalakishvili

Space International

specific
Photo
REST or gRPC: Best practices for modern architectures

Kristina Kraljić

PIS d.o.o.

specific
Photo
ML/AI in the cloud - State of the Art in 2025

Federico Fregosi

OpsGuru

broad
Photo
Using Heterogeneous Computing in Databases

Aleksandr Borgardt

OtterStax

specific
Photo
Azure cloud architecture for high availability and low latency

Florian Lenz

neocentric GmbH - Azure Cloud Developer / Architect

specific
Photo
Serverless First Mindset: seize opportunities, know your limits and experience real success stories

Florian Lenz

neocentric GmbH - Azure Cloud Developer / Architect

specific
Photo
The Art of Decision Making: Balancing Trade-Offs in Software Architecture

Florian Lenz

neocentric GmbH - Azure Cloud Developer / Architect

broad
Photo
Federate it! Limits of GraphQL-based architectures.

Alexander Gilevich

EPAM

specific
Photo
Writing a TSDB from Scratch: Performance Optimization

Roman Khavronenko

VictoriaMetrics

specific
Photo
Cloud Costs with ClickHouse and OpenCost

Denys Kondratenko

Altinity

specific
Photo
The simplest way to build resilient applications

Francesco Guardiani

Restate Gmbh

broad
Photo
The Anatomy of a Distributed JavaScript Runtime

Peter van Vliet

Masking Technology

broad
Photo
Dismantling Big Data with DuckDB

Yoav Nordmann

Tikal Knowledge

specific
Photo
Mindset by Design: Transforming How You Build Software

Mihaela-Roxana Ghidersa

Signant Health

broad
Photo
Mastering Software Design: Best Practices for Building Robust Applications

Ambesh Singh

Visionet Systems Deutschland

broad
Photo
Organizational Sustainability with Platform Engineering

Lesley Cordero

The New York Times

specific
Photo
Exploring the Tradeoffs of Event-Driven Architecture in Microservices

Florian Lenz

neocentric GmbH - Azure Cloud Developer / Architect

specific
Photo
Blending Product Thinking with Architecture

Joel Tosi

Dojo and Co

broad
Photo
Beyond Caching: Valkey's Advanced Data Structures in Action

Viktor Vedmich

Amazon Web Services

specific
Photo
Achieving True Layered Separation with Hexagonal Architecture in Spring Boot

Adrian Kodja

softgarden e-recruiting GmbH

specific
Photo
Architectures that we can use with .NET

Alexej Sommer

Capgemini

broad
Photo
Open Source Ecosystem for ClickHouse on Kubernetes

Denys Kondratenko

Altinity

specific