Setting up ELB and Auto Scaling
Along with conventional approaches for DoS/DDoS attack mitigation and protection, the AWS cloud provides capabilities based on its elasticity. DoS/DDoS attacks are attempts to deplete limited compute, memory, disk, or network resources, which often work against on-premises infrastructure. However, the AWS cloud is elastic, in the sense that new resources can be employed on demand, if and when required.
How to do it...
Steps to create ELB and Auto Scaling have already been shared in Chapter 3, VPC Advanced Components.
How it works...
As AWS services are highly durable in nature, you can have ELB and ASG in the case of an attack:
- All the requests will come to your Elastic Load Balancing and beneath that, it will go to your EC2 servers.
- You can configure CloudWatch to react on the sudden spikes (For example, trigger an alarm and send SNS notification or trigger EC2 instances using Auto Scaling).
- Auto Scaling will scale out your web server based on the load or number...
