Ravi Sir's Cards › AWS
DDoS layers 3/4/7
This revision card explains DDoS layers 3/4/7. It starts from the need that mis-labelling the layer wastes the first hour. It describes l3 volumetric, L4 SYN/connections, L7 HTTP — Shield + WAF share the work. The how-to section notes metrics triage , then pick runbook , then Shield and/or WAF actions. An example on the card is rahul Deshmukh tabletop separates SYN from HTTP flood.
Read card text
What this card says
Why do we need it?
Mis-labelling the layer wastes the first hour.
What is it?
L3 volumetric, L4 SYN/connections, L7 HTTP — Shield + WAF share the work.
L7
How to do it
Metrics triage → pick runbook → Shield and/or WAF actions.
Example
Rahul Deshmukh tabletop separates SYN from HTTP flood.