Does GAE provide quantitative default abuse protection?

Question

If I said, download a sample application written in Python, will Google protect me from malicious bots by trying to eat my resources? DoS attacks?

How much can I expect from Google?

background:

I read this article , and it looks like you have the option to manually request the blocking of specific blocks of IP addresses. I am not very good at security, but I would suggest that Google automatically close suspicious IP addresses. But then I realized that I really did not know what kind of protection Google provided, if any, so I thought it was better to ask.

Answer 1

They will not protect you. You must manually block the IP address, and even this requires redeploying the code (there is no interface for it).

I’m talking about this from the experience of an unexpected account for $ 1,000 per week in a regular application for $ 5 per day. I increased the limit to make a large import of data consuming a lot of resources, and then not to postpone it again. Big mistake. They gave me system loans of less than one third, not sure if this happened the day after the change in billing (a preliminary billing change would not cost more than $ 5 / day), or if this is a general policy after a DoS attack.

Even if you have an account set up, it will simply stop servicing your resources as soon as your account is eaten up and a warning letter will not be sent requiring you to use a third-party monitoring service or to view your site 24/7, which makes DoSers work much easier .

Bottom line: Wipe gently.