Intelligent attacks against applications, whether encrypted or not, can be handled on the local server with DDoS Hybrid Defender (DHD) from F5, which provides next-generation DDoS defense to ensure real-time, always-on protection; while large volumetric attacks are handled with F5's Silverline DDoS protection cloud service, which working On-Demand, detects and mitigates DDoS attacks in real time.
The defenses DDoS on the local server (Onpremises) can be very effective in
blocking most DDoS attacks locally and being always active, can
immediately block most attacks. However, they are useless in case of large volumetric attacks.
On the other hand, although cloud DDoS protection (On-Demand) works well for volumetric attacks, struggles with a much slower mitigation response, increased latency, increased operational complexity, and the inability to handle encrypted HTTPS attacks due to their asymmetric nature.
ALTERNATIVE
- Use DDoS protection either on the local server or in the cloud, independently, and deal with the pros and cons of each one.