If I make a self-hosted Mini Cloudflare, will anyone like it? reddit / selfhosted ---------------------------------------------------------------------- PenArtistic71 · 2023-11-18 04:48 **Customized Edges** Deploy flexibly in a single cloud, multi-cloud, on-premises DC, or using Infrastructure as Code (IaC), giving you full control over data, gateway visibility, and on-demand network coverage. ​ **AppZTNA Anti-DDoS** AppZTNA security model is entirely opposite to Cloudflare's. It doesn't depend on centralized network mitigation for DDoS attacks. In a Server Find Client zero-trust network, attackers can't attack what they can't see. ​ This is my startup idea. I don’t know if anyone will need it. I hope to get your feedback. Thank you. ​ ---------------------------------------------------------------------- ElevenNotes · 2023-11-18 05:46 and how does a client connect to what he can't see ...? ---------------------------------------------------------------------- Disastrous_Elk_6375 · 2023-11-18 05:52 Through quantum layers on top of cryptocurrency driven mass market unlimited scalable bandwidth based on the multiverse on chain highly redundant polarity reversed morphing auto networks. \^ op, I got all them buzzwords, lemmeknow if you need a copywriter :) ---------------------------------------------------------------------- shanlar · 2023-11-18 06:19 web4 ---------------------------------------------------------------------- thekrautboy · 2023-11-18 07:30 Thanks for the early morning laugh. ---------------------------------------------------------------------- ElevenNotes · 2023-11-18 07:35 I see, its so obvious once you have used every buzzword there is, thanks for the enlightenment. ---------------------------------------------------------------------- Brent_the_constraint · 2023-11-18 07:51 This is the most ridiculous thing I read in the last year…no wait…….. yes it is… ---------------------------------------------------------------------- Ouity · 2023-11-18 08:09 Just shut up and take my money already ---------------------------------------------------------------------- threedaysatsea · 2023-11-18 10:35 If it doesn’t involve AI, I’m not interested. ---------------------------------------------------------------------- tech2but1 · 2023-11-18 11:44 All I can say is, wut? ---------------------------------------------------------------------- PenArtistic71 · 2023-11-18 11:58 This approach is effective specifically for mobile applications, enabling proactive defense rather than passive mitigation. I aim to provide an open-source SDK that injects zero-trust security into your applications and APIs like a vaccine. Here's how it works: assign a unique Edge IP for each mobile device or split suspicious devices from legitimate user devices. When an attacker identifies a target, I'll allocate a specific Edge IP for them. If the attacker launches a DDoS against the Edge IP, I'll reverse associate it with the suspicious device. This has no impact on global users since attackers can't obtain global IP addresses. I believe this would be particularly effective for mobile apps facing large-scale targeted attacks, allowing precise identification of attacker devices. ---------------------------------------------------------------------- PenArtistic71 · 2023-11-18 12:05 I just want to try new ways to solve DDoS problems. But it can only be used on the mobile app ---------------------------------------------------------------------- ElevenNotes · 2023-11-18 12:27 From what I read you lack some fundamental in networking knowledge. Read up on how public networks work and then read what a BGP null route is, and last but not least, learn what DDoS is. ---------------------------------------------------------------------- phein4242 · 2023-11-18 12:41 Even if you can get the appZTNA stuff to work (which I doubt), how is your infra going to absorb multi Tbit traffic without customer impact? ---------------------------------------------------------------------- PenArtistic71 · 2023-11-18 14:07 Perhaps I didn't express my thoughts clearly, and for that, I apologize. In the past, we typically approached the challenge of mitigating DDoS attacks by countering and combating resources at the L3-L7 level. I do not deny that this is a correct and effective solution, and I am familiar with how it works. However, in my previous work, our mobile app often fell victim to DDoS attacks, and I found that there could be an alternative approach to addressing the issue. Why must we tackle DDoS with a firewall mindset? Is it possible to make DDoS disappear more proactively? We analyzed DDoS from the ATT&CK perspective of the attacker, focusing on the typical steps of attacking a mobile app: 1. Downloading the app from the App Store. 2. Analyzing the app through packet capture or debugging tools to identify the attack target: Domain or IP address. 3. Using DDoS tools to initiate an attack on the target using a botnet. Typically, we address DDoS at the third step when the attack has already occurred, and we are left seeking additional layers of protection. Our approach is in the second stage. When I have a certain number of edge IPs to distribute user or device connections and manage global traffic based on user or device context, this method is highly effective. The only drawback is that this method is only effective for native mobile or client applications. However, the benefits it brings include making the application actively immune to DDoS rather than passively defending against it and effectively identifying attackers. ---------------------------------------------------------------------- PenArtistic71 · 2023-11-18 14:13 Perhaps I didn't express my thoughts clearly, and for that, I apologize. In the past, we typically approached the challenge of mitigating DDoS attacks by countering and combating resources at the L3-L7 level. I do not deny that this is a correct and effective solution, and I am familiar with how it works.However, in my previous work, our mobile app often fell victim to DDoS attacks, and I found that there could be an alternative approach to addressing the issue. Why must we tackle DDoS with a firewall mindset? Is it possible to make DDoS disappear more proactively?We analyzed DDoS from the ATT&CK perspective of the attacker, focusing on the typical steps of attacking a mobile app: 1、Downloading the app from the App Store. 2、Analyzing the app through packet capture or debugging tools to identify the attack target: Domain or IP address. 3、Using DDoS tools to initiate an attack on the target using a botnet. Typically, we address DDoS at the third step when the attack has already occurred, and we are left seeking additional layers of protection.Our approach is in the second stage. When I have a certain number of edge IPs to distribute user or device connections and manage global traffic based on user or device context, this method is highly effective.The only drawback is that this method is only effective for native mobile or client applications. However, the benefits it brings include making the application actively immune to DDoS rather than passively defending against it and effectively identifying attackers. ---------------------------------------------------------------------- HTTP_404_NotFound · 2023-11-18 15:06 A mini self-hosted cloudflare.... you mean, like building a reverse proxy? If so... we already have treafik, nginx, haproxy, etc.... Self-hosted, ruins the reason I use cloudflare, completely. I use cloudflare, because... 1. DDOS / Attack protection. The bandwidth hits their servers, and not mine. 2. Hiding my private IP / handling my dynamic IP. 3. Processing my domain's SMTP. You don't want to handle email at your home IP.... its likely blacklisted from major providers. ---------------------------------------------------------------------- zn448sk39 · 2023-11-18 15:09 Introducing QuantumNetX, the groundbreaking Cloudflare competitor that revolutionizes the way we experience the internet. By leveraging the power of quantum layers atop a cryptocurrency-driven framework, QuantumNetX offers an unparalleled mass market solution for unlimited scalable bandwidth. Inspired by the concept of the multiverse, this cutting-edge platform operates on an on-chain infrastructure, ensuring highly redundant connectivity and unparalleled reliability. With its polarity-reversed morphing capabilities, QuantumNetX adapts seamlessly to changing network conditions, guaranteeing optimal performance at all times. Utilizing self-assembling auto networks, this innovative solution effortlessly establishes connections, effectively mitigating threats and enhancing the overall internet experience. Embrace a new era of limitless connectivity and performance with QuantumNetX, the next-generation Cloudflare competitor redefining the internet landscape. ---------------------------------------------------------------------- selfhosted-ModTeam · 2023-11-18 16:16 This post is being removed due to the subject not being related to the "selfhosted" theme of the community. Please message the mods if you have any questions or believe this removal has been in error. ---------------------------------------------------------------------- phein4242 · 2023-11-18 16:37 You expressed yourself just fine and my question is still valid. Do you have the capacity to handle multi Tbit traffic on the ips that you use to hide the backend ips? Because if all of those are flooded, not only will the backend app be unreachable, but all your customers will be unreachable as well. ---------------------------------------------------------------------- cdemi · 2023-11-18 21:42 What do you mean used on the mobile app? So if I'm DDoSing your infrastructure I can't do it from "the mobile app" but I can do it with everything else?