blocks|key|741431|text|不，它不能防御DDOS攻击。它保护CPU不会过载，但它在休眠时仍然占用线程，因此攻击者可以很容易地占用web服务器中分配的所有线程，使其无响应。它实际上使执行DDOS攻击变得更容易。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|741432|睡眠可用于通过减少每秒可进行的尝试次数来防止暴力fource攻击。(缺点当然是它对DDOS攻击更敏感。)|741433|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

No, it doesn't protect against DDOS attacks. It protects the CPU from being overloaded, but it still occupies the thread while it's sleeping, so an attacker can easily occupy all of the assigned threads in the web server, rendering it unresponsive. It actually makes it easier to perform a DDOS attack.

A Sleep can be used to protect against brute fource attacks by reducing the number of tries that can be done per second. (The drawback is of course that it makes it more sensetive to DDOS attacks.)

blocks|key|4076510|text|这绝对不能阻止DDOS，因为应用程序前面的网络设备可能仍然不堪重负。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4076511|此外，“分布式拒绝服务”的分布式本质意味着您将从许多不同的IP获得过多流量，而不是一个。|4076512|但不管怎样，你在你的应用程序中所做的并不能绕过你的应用程序前面的任何东西而不被淹没。|4076513|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

It definitely doesn't prevent a DDOS because networking equipment in front of your application may still be overwhelmed.

Additionally the distributed nature of a "distributed denial of service" means that you'll be getting excessive traffic from lots of different IPs, not one.

But regardless, what you're doing in your app doesn't get around whatever is in front your app from being overwhelmed.

blocks|key|4076559|text|线程休眠仅在帮助防范加密攻击时有用。您可以使用它们来防范：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4076560|4076561|攻击者使用不同质询字符串的执行时间来确定实现中的逻辑。如果您确保所有响应都花费相同的时间，那么它们就不能使用该信息来确定您的算法如何在重复失败的密码尝试后works|unordered-list-item|4076562|Increasing执行时间，以避免暴力破解攻击|4076563|4076564|除了这些用途之外，线程休眠在安全性方面没有太多的应用。它们占用资源(连接或会话状态)，因此对于防范DoS攻击毫无价值。|4076565|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|N|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|O|8|@]|9|@]|A|$]]|$1|F|3|G|5|E|7|P|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|R|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|L|$]]

A thread sleep is useful only to help guard against cryptography attacks. You can use them to guard against:

<ul>
<li>Attackers using execution time of different challenge strings to determine the logic in your implementation. If you ensure that all responses take the same time, then they can't use that information to determine how your algorithm works</li>
<li>Increasing execution time upon repeated failed password attempts to avoid a brute force attack</li>
</ul>

Besides these uses, a thread sleep doesn't have much application in security. They tie up resources (connections or session state), so are worthless for guarding against a DoS attack.

blocks|key|295816|text|不是的。DDoS是使用大量被攻陷的机器攻击目标的攻击。这将防止像DoSes这样的较小攻击，但不能防止分布式攻击。通常，你的web服务器会在它产生任何效果之前崩溃。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|295817|如果您遇到很多问题，我建议您使用DDoS保护服务或主机。|295818|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

No. A DDoS is an attack that used a lot of compromised machines to attack a target. That will protect against smaller attacks like DoSes, but not distributed attacks. Usually, your web server will crash before that could make any sort of effect.

I would recommend a DDoS protection service or host if you're having a lot of problems with them.

blocks|key|2661604|text|DDoS不能被代码保护，它不仅仅是保护你的服务器，通常DDoS会伤害你的负载均衡器和防火墙，如果你有的话，如果没有的话，DDoS会伤害你的服务器。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2661605|DDoS可以通过许多级别来完成:更新/传输控制协议/超文本传输协议等。|2661606|保护你自己免受DDoS攻击的最好方法是使用反向代理，这样如果你访问你的网站，它就不会显示真正的IP，幸运的是，我们现在可以免费使用Cloud+Flare。https://www.cloudflare.com/|offset|length|2661607|我写了一篇关于Cloud+Flare如何保护你的小文章，因为我一年来一直在使用它们，它们是目前为止最好的，也是最便宜的。|2661608|http://www.yourwwwdesign.com/2012/07/23/best-practice-to-protect-your-site-from-ddos-for-free/|2661609|希望这能有所帮助！如果你需要更多的帮助，请不要犹豫与我联系。|2661610|entityMap|0|LINK|mutability|MUTABLE|url|https://www.cloudflare.com/|1^0|0|0|25|R|0|0|0|0|2M|1|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|X|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|Y|8|@]|9|@$F|Z|G|10|1|11]]|A|$]]|$1|H|3|I|5|6|7|12|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|13|8|@]|9|@$F|14|G|15|1|16]]|A|$]]|$1|L|3|M|5|6|7|17|8|@]|9|@]|A|$]]|$1|N|3|-4|5|6|7|18|8|@]|9|@]|A|$]]]|O|$P|$5|Q|R|S|A|$T|U]]|V|$5|Q|R|S|A|$T|K]]]]

DDoS can't be protected by code, it is more then protecting your server, usually DDoS hurt your load balancer and firewall if you have some, if not the DDoS will hurt your server.

DDoS can be done via many levels: UPD/TCP/HTTP etc...

The best way to protect yourself from DDoS is to use reverse proxy so if you go to your site it wont show the real IP, and happily we have now for free with Cloud Flare. <a href="https://www.cloudflare.com/" rel="nofollow">https://www.cloudflare.com/</a> 

I wrote a small article about how Cloud Flare protects you as i'm using them since a year now and they are the BEST so far and the cheapest.

<a href="http://www.yourwwwdesign.com/2012/07/23/best-practice-to-protect-your-site-from-ddos-for-free/" rel="nofollow">http://www.yourwwwdesign.com/2012/07/23/best-practice-to-protect-your-site-from-ddos-for-free/</a> 

Hope this helps! if you need more help please don't hesitate to contact me.

If I introduce a <code>Thread.Sleep(x)</code> delay while rendering my HTTP response, where <code>x</code> would change depending on the rate of requests from a given IP: from being zero while request rate is low, and gradually increasing if requests are following one after another.

Is this a viable solution to protect against a DDOS?

What are the weak points?

DDOS attack: defending with Thread.Sleep()?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

如果我在呈现HTTP响应时引入Thread.Sleep(x)延迟，其中x将根据来自给定IP的请求速率而变化:当请求速率较低时，从零开始，如果请求接二连三地跟随，则逐渐增加。这是防止DDOS攻击的可行解决方案吗？弱点是什么？

问DDOS攻击:用Thread.Sleep()防御？
EN

回答 5

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问DDOS攻击:用Thread.Sleep()防御？EN

回答 5

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问DDOS攻击:用Thread.Sleep()防御？
EN