Ddos attack way, this is a world-class problem and there is no solution can only alleviate (Jane value as cancer), but also need to pay a high manpower, material cost, I think the reason is not completely, one important reason is that the server can not be sure the client with real IP - in fact, the client may have no fixed IP address, due to limited IPv4 address, have to use dynamic to distribution, while has plenty of IPv6 addresses, allegedly average dozens of every square metre can be allocated to the surface of the earth, but I think in the telecommunications technology rapid development today, IPv6? IPv128 also can consider! Is factory network equipment in the future, as its a lifelong unchanged IP address, (at the same time as a physical device number, epoxy resin), all the network devices, all only supports the real address, otherwise can't networking, global set a buffer period, such as 10 years, the global enterprise, personal change its own network equipment, determined, pour, completely solve out ddos!!!

CodePudding user response:

Actually don't need a one size fits all, also can let the new equipment backward compatibility, let Internet service provider to replace their own infrastructure, individual users can choose or continue to use the old and new devices, but in the web server, can distinguish between data is from traditional equipment or new network terminal (IPv64/128) as "network real-name", once encounter ddos attacks, the server can filter out all immediately request data from the old equipment, and the request of the new equipment is not affected,