Anubis for protection against DDOS attacks

[hossam26644]

Naïve question: would this pow approach, in its current form or in a tweaked form, be any useful for protection against DDOS attacks?

[steschuser]

Hello,

it depends on what you mean by DDOS attack.
It won't help against DNS amplification for example.

However, it will most definitly help against millions of Bots accessing your site at the same time. Its not, strictly speaming, an attack, but your site will be down all the same.

[Xe]

Exactly what @steschuser said. Consider the OSI model:

Anubis is intended to help against Layer 7 (application). If someone sends you too much traffic, it'll overwhelm everything else.

[ranomier]

The thing with ddos is to overwhelm. If your website takes fewer resources to display then anubis (asuming it runs on the same server) then anubis could potentially even be worse.

Anubis from what i have seen is very lightweight, so things like wordpress or nextcloud outshine the footprint per request easily.

Also as far as i know anubis does not do fail 2 ban (meaning if someone fails x amount of time there IP address gets put into a block rule with iptables/nftables.

That brings me to the point of the person above. Even if someone is already on fail2ban, that still takes resources:

• The connection is still made to your server
• the bandwidth consumed.
• and the iptable/nftable block still calculated