DDoS mitigation @flipkart
Channel: Hasgeek TV
Date: 05/06/2014

DDoS Attacks have been on the rise all over the world. These include Volumetric i.e. Layer 4 TCP / UDP and Application i.e. Layer 7 HTTP, MySQL.Volumetric attacks are all about muscling out the attacker at the upstream / scrubbing farms. The same cannot be done for Layer 7 attacks.

Traditional DDoS systems cannot catch Layer7 attacks as they all work on layer 4. There are inline solutions such as WAF, etc which looks at traffic and make profiles like IDP. But at scale all that becomes resource intensive and affects latencies. 

At Flipkart, the DevOps team has devised a solution that looks at logs from various layers, detects patterns and automatically blocks the attacker at the perimeter. In this talk, Sameer Garg explores various types of attacks and what Flipkart does for mitigation.