What can be done to prevent a DoS attack for a Sup...
# off-topicj
jon.m
10/27/2021, 7:20 PMWhat can be done to prevent a DoS attack for a Supabase hosted app? If someone runs a script to hit the DB over and over, that is a pretty easy way to bring down the app and hike up the fee.
s
silentworks
10/27/2021, 9:48 PMI don't think any fees would change, Supabase doesn't charge for API requests
c
chipilov
10/27/2021, 9:50 PMtrue, but the question of denial of service remains. Does the fact that that the API sits behind Kong's API gateway provide any protections?
a
Ammar AF
10/28/2021, 9:48 AMwon't there be chargers for the transfer limits though, if you were on the "pay as you go" plan? like the database/object storage transfer charges? thanks
j
jon.m
10/28/2021, 6:15 PMWe should put some dedicated time to this problem and other similar problems.
It's probably top of mind for people.
a
Ammar AF
10/28/2021, 6:37 PMI heard they are implementing rate-limiting which may reduce DDoS impact a bit - not sure about the timeline of the feature though... https://www.reddit.com/r/Supabase/comments/p7vhbi/rate_limiting/
j
jon.m
10/28/2021, 6:47 PMI've heard that as well. But the time line is murky. Hopefully this is something they can get up and running in a month or so.
jon.m
10/28/2021, 6:48 PMI was wondering if there was an alternative solution. Some users discussed adding tables that limited user activity. But that doesn't work for db stuff that can be done by unauthed users