Comments by "Mikko Rantalainen" (@MikkoRantalainen) on "I Survived A DDOS" video.

If you have competent attacker, they will just DDoS your network win SYN flood from distributed bot net and there's nothing you can do about it because your application firewall doesn't even see a proper connection to start to filter. The idea is to have so much traffic that your network connection is totally filled up. Cloudflare is the only cheap solution to that but that requires giving Cloudflare ability to read all your traffic.
18
@lupenn5914 How do you use syn cookie without already wasting the bandwidth for the incoming packet + sending the ACK? Syn cookie only reduces RAM usage of the server.
1
@lupenn5914 Syn cookie can only reduce RAM usage of the server. DDoS will still eat all of your bandwidth in both directions and doesn't help with CPU usage at all.
1
@Fs3i The attacker can use a botnet but the defender must pay for 24/7 network connectivity. It's always unfrair game and you have to be Cloudflare, Google, Facebook or Amazon to be able to handle it without any issues.
1