Mitigating a Denial-of-Service Attack in a Cloud-Based Proxy Service

摘要

A proxy server in a cloud-based proxy service receives a message that indicates that a domain, whose traffic passes through the proxy server, may be under a denial-of-service (DoS) attack. The proxy server enables a rule for the domain that specifies that future requests for resources at that domain are subject to at least initially passing a set of one or more challenges. In response to receiving a request for a resource of that domain from a visitor, the proxy server presents the set of challenges that, if not passed, are an indication that that the visitor is part of the DoS attack. If the set of challenges are passed, the request may be processed. If the set of challenges are not passed, the request may be dropped.

主权项

1. A method in a proxy server in a cloud-based proxy service, wherein the proxy server is situated between client computing devices that request network resources and origin servers that serve network resources, the method comprising:
receiving a message that indicates that a domain, whose traffic passes through the proxy server, may be under a denial-of-service (DoS) attack; enabling a rule for the domain that specifies that future requests for resources at that domain are subject to at least initially passing a set of one or more challenges; responsive to receiving a first request for a resource of that domain from a first visitor, presenting the set of challenges that if not passed are an indication that the visitor is part of the DoS attack.