A Cost Optimized Solution for Defending Against DDoS Attacks: An Analysis of a Multi-layered Architecture

Distributed denial-of-service (DDoS) attacks have grown to be a major concern for businesses and individuals who use the internet for operations and communications. DDoS attacks have the potential to seriously harm a website or online service, resulting in losses in money and reputational damage. In this research, we propose a cost-optimized and multi-layered DDoS protection architecture that utilizes a firewall, IDS/IPS, reverse proxy, and web server cluster. The architecture offers protection from a variety of DDoS attacks, including volumetric, network-layer, application-layer, and SSL attacks. We test the architecture in real-world scenarios and analyzed the results to determine how effective it is. We demonstrate that our architecture is capable of successfully mitigating DDoS attacks while maintaining the availability of the website to legitimate users through extensive testing and analysis of test results. Our research shows that the suggested architecture for DDoS protection is affordable and simple to integrate into existing systems. © 2023, The Author(s), under exclusive licence to Springer Nature Singapore Pte Ltd.