Balancing at Wire Speed
summary
Describes how Odnoklassniki’s traffic load balancer handles high-rate network attacks (especially SYN-floods) and why balancer throughput becomes the critical bottleneck during DDoS. Covers practical lessons and approaches used in their infrastructure to sustain service for 73M+ users and mitigate attack vectors that target traffic distribution.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 6:51Load balancing evolution
- 8:38XIN flooding challenge
- 11:15NFV solution
- 14:50Q&A
- 28:12Performance under attack
- 34:04Technical deep dive
- 40:01Implementation details
- 49:18Q&A and summary
related talks
46mKeeping the Balance: Load Balancing Demystified
30mKeeping the Balance: Internet-Scale Loadbalancing Demystified
45mAnatomy of a DDoS
52mNot all attacks are malicious: DDoS from outside and within
53mHTTP Traffic Load Balancing
23mBalancing on the Edge: Transport Affinity without Network State
42mWarding against the Dark Arts: Crafting a Defense Strategy against Botnet DDoS
40mThe new reality of DDOS