---
title: "#156 — IP Spoofing: The real cause of large DDoS attacks"
publication: "StatusCode Weekly"
issue: 156
published_at: "2018-03-07"
canonical_url: "https://weekly.statuscode.com/issues/156"
---

WebOps Weekly 156   . 

The latest Web operations, HTTP, and Web performance news -[Read this on the Web](https://webopsweekly.com/issues/156) 

[![WebOps Weekly\](https://webopsweekly.com/images/webops-header.png)](https://webopsweekly.com) Issue 156 — March 7, 2018     

[HTTP Analytics for 6M Requests Per Second using ClickHouse](https://blog.cloudflare.com/http-analytics-for-6m-requests-per-second-using-clickhouse/) tutorial [ClickHouse](https://clickhouse.yandex/) is a fast, open source column-oriented database for producing real time analytical data reports which suits it well for Cloudflare’s level of HTTP analysis. Alex Bocharov [Meet Bandaid, The Dropbox Service Proxy](https://blogs.dropbox.com/tech/2018/03/meet-bandaid-the-dropbox-service-proxy/) story A look behind the scenes at Dropbox, starting with Bandaid, a service proxy built in [Go](https://golangweekly.com/) that accelerated Dropbox’s adoption of Service Oriented Architecture. Dropbox Developer Blog [Announcing Gloo: The Function Gateway](https://medium.com/solo-io/announcing-gloo-the-function-gateway-3f0860ef6600) tools Built on top of [Envoy Proxy](https://www.envoyproxy.io/), Gloo provides a unified entry point for access to both services and serverless functions. [GitHub repo.](https://github.com/solo-io/gloo) Idit Levine (solo.​io) [New Research: Crypto-mining Drives Almost 90% of All Remote Code Execution Attacks](https://www.imperva.com/blog/2018/02/new-research-crypto-mining-drives-almost-90-remote-code-execution-attacks/?utm_source=webops&utm_medium=article&utm_campaign=primary) RCE attacks open the door for illegal crypto-mining activities. Impervasponsored[![\](https://copm.s3.amazonaws.com/37d90ab5.png)](https://www.imperva.com/blog/2018/02/new-research-crypto-mining-drives-almost-90-remote-code-execution-attacks/?utm_source=webops&utm_medium=article&utm_campaign=primary) [IP Spoofing, The Real Cause of Large DDoS Attacks](https://blog.cloudflare.com/the-root-cause-of-large-ddos-ip-spoofing/) story Common level 3 DDoS attacks thrive on attackers faking source address in IP packets - here’s how it looks and works, and why carriers need to step up with smart source IP filtering. Marek Majkowski [Kubernetes is First CNCF Project to 'Graduate'](https://www.cncf.io/blog/2018/03/06/kubernetes-first-cncf-project-graduate/) news Kubernetes was the CNCF’s inaugural project where it has been incubated. Its maturity now sees it ‘graduating’ which basically means it meets [a variety of conditions.](https://www.cncf.io/projects/graduation-criteria/) Cloud Native Computing Foundation [How Segment is Securing Access to Its Many AWS Accounts](https://segment.com/blog/secure-access-to-100-aws-accounts/) story How a company handles the ‘few dozen’ AWS accounts it has and how it has ensured employees both have and need no AWS keys. Segment [Cockpit: Linux Sysadmin From Your Browser](http://cockpit-project.org/) tools An interactive server admin interface for doing things like starting containers, storage admin, network config, inspecting logs, etc. Cockpit Project Jobs [Reliability Engineer at Drivy (Paris, France)](https://www.drivy.com/jobs/bb504b02-0973-411f-b745-2cd875fbff12?lever-source=webops_weekly) We're Europe's #1 carsharing service, opening cars with smartphones, join us and help shape the future of mobility. Drivy [Find a Job You're Passionate About](https://www.vettery.com/tech?utm_medium=cooper-webopsweekly&utm_campaign=ad-9311&utm_source=newsletter&utm_content=grouped&utm_term=tech) Vettery connects you directly to hiring managers at over 4,000 top companies. Make a profile today and land your dream job. vettery In brief [Kubernetes 1.10 Beta Available](http://blog.kubernetes.io/2018/03/first-beta-version-of-kubernetes-1-10.html) news The final release is due in 2 weeks when we’ll cover it fully. Nick Chase [Apache Spark 2.3 with Native Kubernetes Support](http://blog.kubernetes.io/2018/03/apache-spark-23-with-native-kubernetes.html) news Apache Spark, a framework for large-scale data processing, has gained native Kubernetes support in its latest release. Anirudh Ramanathan and Palak Bhatia (Google) [Announcing Google Cloud Spanner as a Vault Storage Backend](https://cloudplatform.googleblog.com/2018/02/announcing-Google-Cloud-Spanner-as-a-Vault-storage-backend.html) news Google Cloud Platform [What Service Meshes Mean for Enterprise Security](https://thenewstack.io/service-meshes-mean-enterprise-security/) tutorial Michael Churchman [Pro Tip for Your First Pipeline: Managing Build Versions in GoCD](https://www.gocd.org/2018/02/13/managing-build-versions-pipeline/?utm_campaign=cd_hacks&utm_medium=email&utm_source=cooperess_webops&utm_content=cd_hacks&utm_term=) tutorial GoCDsponsored [Building a Serverless Real-Time Chat App with AWS AppSync](https://aws.amazon.com/blogs/mobile/building-a-serverless-real-time-chat-application-with-aws-appsync/) tutorial Adrian Hall and Ed Lima [Using HAProxy for HTTP/2 and as an SSL Endpoint in 2018](https://certsimple.com/blog/haproxy-http2-dynamic-load-balancing-ssl) tutorial Mike MacCana [Deep Dive: Securing the Automation of ACME DNS Challenge Validation](https://www.eff.org/deeplinks/2018/02/technical-deep-dive-securing-automation-acme-dns-challenge-validation) tutorial Electronic Frontier Foundation [DevOps Security at Scale: A 4 Part Series](https://www.conjur.org/blog/2017/12/19/security-at-scale.html) tutorial Brian Kelly [eBook: A Roundup of Managed Kubernetes Platforms](https://resources.codeship.com/ebooks/managed-kubernetes-platforms-aw?utm_source=email-sponsorship&utm_medium=cpc-webops-weekly-secondary&utm_campaign=managed-kubernetes-platforms) Codeshipsponsored [Spooky Action at a Distance, How an AWS Outage Ate Our Load Balancer](https://blog.hostedgraphite.com/2018/03/01/spooky-action-at-a-distance-how-an-aws-outage-ate-our-load-balancer/) story Fran Garcia [How Netlify’s Deploying and Routing Infrastructure Works](https://medium.com/netlify/how-netlifys-deploying-and-routing-infrastructure-works-c90adbde3b8d) story David Calavera [On-Call Rotations: How Best to Wake Devs Up in the Middle of the Night](https://thenewstack.io/call-rotations-best-wake-devs-middle-night/) opinion Jennifer Riggins [Measuring the Many Sizes of a Git Repository](https://blog.github.com/2018-03-05-measuring-the-many-sizes-of-a-git-repository/) tools [git-sizer](https://github.com/github/git-sizer/) computes various repo size metrics and alerts you to any that might cause problems. GitHub [Quadrupling Ansible Performance with Mitogen](http://pythonsweetness.tumblr.com/post/171589071872/quadrupling-ansible-performance-with-mitogen) tools Mitogen is a distributed programming library for Python. David Wilson [Flatcar Linux: An Immutable Distribution for Containers](https://kinvolk.io/blog/2018/03/announcing-the-flatcar-linux-project/) tools Not GA yet but you can sign up to be a tester. Kinvolk [Integrate Plesk on DigitalOcean with our Free Extension](https://www.digitalocean.com/community/projects/plesk-on-digitalocean?utm_source=paid_newsletter+WebOps+weekly&utm_medium=display&utm_campaign=dr+awareness+content+plesk&utm_content=3-7-2018+Webops+weekly+cooperpress) tools Simplify complexity and save time through automation with the Plesk extension on DigitalOcean's DNS service. DigitalOceansponsored [go-lambda-ping: Deploy a Lambda to Ping a Site in 20 Seconds](https://github.com/frankcash/go-lambda-ping) code Frank Cash [Skipper: An HTTP Router and Reverse Proxy for Service Composition](https://github.com/zalando/skipper) code Zalando SE [acme.sh: A Pure Unix Shell Script Implementing the ACME Client Protocol](https://github.com/Neilpang/acme.sh) code Neil Pang    [Read this issue on the Web](https://webopsweekly.com/issues/156) [See our archives](https://webopsweekly.com/issues) [Change your email address](*|UPDATE_PROFILE|*)  [Stop getting this newsletter](*|UNSUB|*)  

Published by [Cooperpress](https://cooperpress.com/)
Fairfield Enterprise Centre, Lincoln Way, Louth, LN11 0LS, UK