WebPerf Amazon Shield for DDOS Protection

eva2000 · Dec 3, 2016

Looks like Amazon AWS is stepping up it's service offering with Amazon Shield

AWS launches Shield to protect web applications from DDoS attacks | TechCrunch

At its re:Invent developer conference, Amazon today announced AWS Shield, a DDoS protection service for web apps that run on Amazon’s cloud computing service.

AWS Shield is generally available today and is already turned on (for free) for all web applications that currently run on AWS — no action by the developer required. The service is based on the work Amazon has done with its Elastic Load Balancer, Cloud Front CDN and Route 53 DNS service. It offers developers automatic protection against the kind of DDoS attacks that are sadly becoming more frequent these days.

The free service, AWS says, will protect applications against 96 percent of the most common attacks.

Amazon will also offer a paid advanced version of AWS Shield. This version will protect applications against more sophisticated attacks. Amazon will also provide Advanced users with cost protection so they won’t have to incur massive costs when they come under attacks. Customers of the advanced service will also get 24×7 access to a response team for custom mitigations. A one-year subscription to AWS Shield Advanced will have a base fee of $3,000/year plus data transfer fees for the use of the Elastic Load Balancer, CloudFront and Route 53.
Click to expand...

From AWS Shield – Managed DDoS Protection

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards web applications running on AWS. AWS Shield provides always-on detection and automatic inline mitigations that minimize application downtime and latency, so there is no need to engage AWS Support to benefit from DDoS protection. There are two tiers of AWS Shield - Standard and Advanced.

All AWS customers benefit from the automatic protections of AWS Shield Standard, at no additional charge. AWS Shield Standard defends against most common, frequently occurring network and transport layer DDoS attacks that target your web site or applications.

For higher levels of protection against attacks targeting your web applications running on Elastic Load Balancing (ELB), Amazon CloudFront, and Amazon Route 53 resources, you can subscribe to AWS Shield Advanced. In addition to the common network and transport layer protections that come with Standard, AWS Shield Advanced provides additional detection and mitigation against large and sophisticated DDoS attacks, near real-time visibility into attacks, and integration with AWS WAF, a web application firewall. AWS Shield Advanced also gives you access to the AWS DDoS Response Team (DRT) and protection against DDoS related spikes in your ELB, CloudFront or Route 53 charges.
Click to expand...

eva2000 · Dec 3, 2016

Amazon Web Application Firewall AWS WAF - Web Application Firewall

AWS WAF is a web application firewall that helps protect your web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. AWS WAF gives you control over which traffic to allow or block to your web applications by defining customizable web security rules. You can use AWS WAF to create custom rules that block common attack patterns, such as SQL injection or cross-site scripting, and rules that are designed for your specific application. New rules can be deployed within minutes, letting you respond quickly to changing traffic patterns. Also, AWS WAF includes a full-featured API that you can use to automate the creation, deployment, and maintenance of web security rules.

With AWS WAF you pay only for what you use. AWS WAF pricing is based on how many rules you deploy and how many web requests your web application receives. There are no upfront commitments.
Click to expand...

eva2000 · Dec 3, 2016

AWS Shield Docs AWS Console Help and AWS Shield Advanced Distributed Denial of Service (DDoS) Protection - AWS WAF and AWS Shield Advanced

AWS Shield Advanced Distributed Denial of Service (DDoS) Protection
A distributed denial of service (DDoS) attack is an attack in which multiple compromised systems attempt to flood a target, such as a network or web application, with traffic. A DDoS attack can prevent legitimate users from accessing a service and can cause the system to crash due to the overwhelming traffic volume.

AWS provides two levels of protection against DDoS attacks: AWS Shield Standard and AWS Shield Advanced.

AWS Shield Standard
AWS services and technologies are built from the ground up to provide resilience in the face of network and transport layer DDoS attacks. For web application attacks, you can also use AWS WAF to configure web access control lists (ACLs) that target network layer DDoS request patterns and help to minimize the affects of a DDoS attack. This DDoS protection, known as AWS Shield Standard, is provided at no additional cost beyond what you are already paying for AWS WAF and your other AWS services.

AWS Shield Advanced
AWS Shield Advanced provides expanded DDoS attack protection for your Elastic Load Balancing resources, CloudFront, and Amazon Route 53 resources.

AWS Shield Advanced includes intelligent DDoS attack detection and mitigation for not only for network layer (layer 3) and transport layer (layer 4) attacks, but also application layer (layer 7) attacks. As an AWS Shield Advanced customer, you can contact a 24x7 DDoS response team (DRT) for assistance during a DDoS attack. You also have exclusive access to advanced, real-time metrics and reports for extensive visibility into attacks on your AWS resources. AWS Shield Advanced offers some cost protection against spikes in your AWS bill that could result from a DDoS attack. This cost protection is provided for your Elastic Load Balancing resources, CloudFront, and Amazon Route 53 hosted zones.

AWS Shield Advanced Limits
AWS Shield Advanced offers advanced monitoring and protection for up to 100 CloudFront distributions, Amazon Route 53 hosted zones, or Elastic Load Balancing resources combined. If you want to increase these limits, contact the AWS Support Center.
Click to expand...

Log in / Register

Forums

Welcome to Centmin Mod Community

WebPerf Amazon Shield for DDOS Protection

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Welcome to Centmin Mod Community

WebPerf Amazon Shield for DDOS Protection

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.