System Design (50 Qs)•Part 4: API Design, Security & Edge Networking (37 - 43)
DDoS Attack Mitigation: SYN Flood, Slowloris & Anycast Absorption.
In Simple Words:
- SYN Flood (Layer 4): Floods TCP SYN packets without sending final ACK to exhaust connection memory table. Fix: SYN Cookies.
- Slowloris (Layer 7): Sends HTTP headers at agonizingly slow rates to keep server thread pool occupied. Fix: Min request rate enforcement.
- Anycast Absorption: Distributes massive attack volume across hundreds of edge locations worldwide.