[Freeswitch-users] Avoiding DDoS with verto?

[Seven Du]

maybe tweak some code so it can log the src ip and fail2ban can catch it.

On Fri, Oct 8, 2021 at 5:11 AM David P <davidswalkabout at gmail.com> wrote:

> After reading about recent DDoS attacks on VOIP providers in
> https://www.rtcsec.com/post/2021/09/massive-ddos-attacks-on-voip-providers-and-simulated-ddos-testing/
> in which Freeswitch is mentioned, I wondered what current practices are for
> services that must serve the public Internet.
>
> For example, a service that is purely verto-based seems like it could
> protect itself in this way:
>
> 1) Block requests on all ports (except the verto WSS login) unless the
> request is from an address that's already part of signaling.
>
> 2) To protect signaling, put it behind AWS API Gateway, which provides
> rate-limiting, and add an authorization check.
>
> Does this seem like it would defend against DDoS? Can FS be configured to
> do #1?
> _________________________________________________________________________
>
> The FreeSWITCH project is sponsored by SignalWire https://signalwire.com
> Enhance your FreeSWITCH install with disruptive priced SMS and PSTN
> services.
> Build your next product on our scalable cloud platform.
>
> Join our online community to chat in real time
> https://signalwire.community
>
> Professional FreeSWITCH Services
> sales at freeswitch.com
> https://freeswitch.com
>
> Official FreeSWITCH Sites
> https://freeswitch.com/oss
> https://freeswitch.org/confluence
> https://cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> https://freeswitch.com



-- 
About: http://about.me/dujinfang
Blog: http://www.dujinfang.com
Proj:  http://www.freeswitch.org.cn
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20211013/d5e78c16/attachment-0001.html>