This question already has an answer here:
- I am under DDoS. What can I do? 5 answers
We are running a search engine and are seeing a huge amount of fake search queries coming in over the last days from thousands of IP addresses. There is no real pattern in terms of queries text or IP range. It seems that there is a bot network trying to bring our down. Currently we're seeing about 30 fake queries per second and it's increasing.
We tried to set up cloudflare, but it did not really help. We could try to block out bad traffic with Captchas, but this could decrease usability for our real users.
Does anybody have an idea how we could handle this? We're running on AWS with Route53.