> pay Google, Amazon or Cloudflare a protection tax.
Just FYI: hetzner has free DDoS https://www.hetzner.com/unternehmen/ddos-schutz
I'm sure other hosting companies also offers it.
Just FYI: hetzner has free DDoS https://www.hetzner.com/unternehmen/ddos-schutz
I'm sure other hosting companies also offers it.
> In this final layer, we filter out attacks in the form of SYN floods, DNS floods, and invalid packets. We are also able to flexibly adapt to other unique attacks and to reliably mitigate them.
Which means any legit http2 connection will go just fine.
Even if such connection now triggers hundreds of substreams.
Push for end to end encrypted internet also means you can't really stop any more advanced attack. You could have just few dozen of hosts doing 20-30 connections each (i.e. "looking perfectly normal" for DDoS protection provider) generating tens of thousands per second in http2 streams.
I'm speaking from experience of mitigating attack like this. Our DDoS provider was near-useless..