Under DDoS attack

[Igor]

My website is under DDoS attack since 2012-08-01, it's not a very large attack so I'm able to block their IP addresses (mostly... for now). But this kind of protection requires me to constantly check "Top 25 visitors" in blacklist part of the dashboard, then add IP address with too many hits to blacklist, deploy app... and I have to do this all day long otherwise they eat through mu outgoing bandwidth.

Is there any better way of dealing with this kind of attacks on Google App Engine?


Normal number of requests for my website was around 6000-7000 per day, since the attack started it's like this:

 |   date | requests |
 2012-08-01 -  11206

 2012-08-02 - 146108
 2012-08-03 - 262770
 2012-08-04 - 265150
 2012-08-05 - 338048

[Mahron]

Dynamic blacklisting would be nice. Some kind of service with an
optimized ip blocker.

[hyperflame]

Try Cloudflare ( they have a free plan, check out https://www.cloudflare.com/plans
). They should protect you from some of the DDOS.

[Igor]

I already looked in to CloudFlare but I was kind of resilient because I'm not quite sure what methods are they using to mitigate DDoS attacks. But I will give it a shot and see what happens.

[Igor]

It's hard to tell if CloudFlare is of any help, I'm still getting a lot of hits, only now they all (new ones) come from CloudFlare IPs so I can't filter on my own.

Now I turned on most aggressive security setting "I'm under attack!". I think this will annoys the hell out of normal users, but if this is the only thing that helps, I will have to use this until the attack stops.