How does dudos protection work?

Question

Computer networks

Now there are many different services for protecting against DDoS attacks on the market, from the infamous stormwall and DDoS guard to excellent, but expensive voxility and the like.
What does the system of protection against DDoS attacks mean now?
Large bandwidth channels, powerful equipment?
How do all these services work?
What equipment is used? Do they write software themselves (filters), what do they write on and for what equipment?
What do you need to create your own DDoS protection service?
What software do these services use? Do they use machine learning, neural networks?

Answer 1

There are a large number of attacks:

• for channel exhaustion
  As a result, protection from all this draws specific equipment, knowledge and skills.
  

  What does the system of protection against DDoS attacks mean now?

  Separating the seed from the chaff - valid from invalid traffic. Therefore, it is important to know in advance what is needed and what should not be.
  

  Large bandwidth channels, powerful equipment?

  To read, they all have their own network that can withstand terabit traffic numbers. Much more important is the literacy of the support service, the speed of response and adequacy.
  

  How do all these services work?

  Own CDN and nginx server in reverse proxy mode or something else.
  

  What equipment is used?

  Operator level.
  

  What do you need to create your own DDoS protection service?

  Expensive virtual or hardware network equipment, a pool of addresses, servers with specific kernel settings. On this occasion, the guys from cloudflare sometimes write on Habré.
  

  Do they use machine learning, neural networks?

  What they write about it is correct. As a matter of fact, it is not clear. Perhaps some use the neural network of the engineer on duty.