Saw this on their twitter page (
https://twitter.com/CoinexPW):
CoinEX.pw @CoinexPW 4h
some networking issues right now, carry on
CoinEX.pw @CoinexPW 3h
DDoS saturated our 100mbit port
Yeah, these exchanges don't have a DDoS management strategy, they think that putting Cloudflare in front is all they need to do.
The trick is only allowing wanted traffic to the server and discarding all else, that's is not a 10sec task, it requires strategic planning.
Some ideas are:
Have a separate login server that is not on the same Internet link as the exchange server.
The login server only collects a white list of valid IPs that have passed login. (Only 1 IP per login permitted)
The exchange server on it's own link is protected by a firewall that denies all traffic from any IP except the ones that the login server has white listed.
The number of clients logged in at a time can have a maximum set to keep load off the exchange server, the login server will refuse anymore logins when the maximum is hit.
People that are not logged in can be directed to some cached static pages on a different server that update every now and then instead of the live site.