How does Fly Proxy handle DOS attacks?

[greg]

Further to this I’d agree about adding something like Cloudflare (though that often causes other issues, like with custom domain SSL verification or getting a client’s actual IP/country as the request now has to pass through an extra proxy). Definitely test it first to check it doesn’t break somthing.

I recall Fly mentioning it but I’m not sure what the current protection is:

server was unreachable until re-deploy

Yeah a little of that! We reuse IPv4 addresses when people delete apps and free apps churn pretty frequently. You never know how someone dirtied an IP. Free services attract people who are prone to getting DDoSed. We mitigate DDoS attacks a whole /24 block at a time. Today’s issue was caused by a DDoS mitigation bug. You won’t notice most DDoS attacks, but it’s still worth avoiding higher risk IP space.