It will inevitably happen at the worst possible time. Before a big release or an important client deployment, when your head of engineering has the flu, or when you’re on vacation. Ours did. It turns out that’s no accident. In addition to Murphy’s law, DDoS attackers time their attacks to when you’re most likely to be unprepared such as on holidays.
For those who don’t know a DDoS attack is an attempt to make an online service unavailable by overwhelming it with traffic from multiple sources. When successful this attack results in slowdown of service and often service shutdown.
On New Year’s Day I returned home from an emergency trip to the doctor with my infant son. That same day we were expecting family in the afternoon and friends in the evening. I was looking forward to a quick nap. Instead, I found a weird contact request in my inbox:
It had already been 2 hours since that first email. I frantically checked our websites (we have several domains). They were all down. Then I noticed an...