Configuring a DoS Profile

We will now create a DoS profile with manually configured thresholds to limit the attack’s effect on our server.

1. Navigate to Security > DoS Protection > DoS Profiles

2. Create a new DoS profile with the name dns-dos-profile.

3. Click Finished.

   

4. The UI will return to the DoS Profiles list. Click the dns-dos-profile name.

5. Click the Protocol Security tab and select DNS Security from the drop-down.

6. Click the DNS A Query vector from the Attack Type list.

7. Modify the DNS A Query vector configuration to match the following values, leaving unspecified attributes with their default value:

   • State: Mitigate

   • Threshold Mode: Fully Manual

   • Detection Threshold EPS: (Set this at 80% of your safe QPS value)

   • Mitigation Threshold EPS: (Set this to your safe QPS value)

     

8. Make sure that you click Update to save your changes.