DDoS mitigation approaches

DDoS mitigation approaches follow a multi-step process of detection of malicious traffic, followed by scrubbing, rerouting or dropping such traffic. Defining normal "traffic patterns" helps to identify abnormal traffic, and also to differentiate between human and bot traffic. Scrubbing involves running heuristic algorithms on the traffic to detect anomalies. Previously, most of these checks were done in hardware. Today, some of them are also done in software.

what is ddos mean?

A technique called "blackhole routing" or "null routing" is used to discard traffic, which might also cause non-malicious traffic to be dropped if there are no filtering criteria. Linode will "block the attack inline, then distribute the increased traffic across its global fiber backbone" in the event of an attack. According to reports, Linode's current solution will adopt null routing if the attack is sufficiently large, and they also recommend using an additional third-party protection service if a large enough attack is anticipated.

Most cloud providers provide various kinds of DDoS protection - like GCP's Google Cloud Armor, AWS's Shield, and Azure's Front Door. Content-focused service providers like Cloudflare, Akamai, Sucuri, Imperva and Fastly also offer DDoS protection to customers. Almost all of these DDoS tools are paid services. However, some of them are included in the cost of the primary service, including in the free tiers. Linode's DDoS service is "free for all Linode customers", i.e., it's included with Linode's other services.