protection against DDoS attacks

Hi,

I'm using HAProxy in the frontend as a reverse proxy to backend servers, I'm thinking of possible ways to protect backend servers from being attacked.
How effective is doing url redirect to protect against these attacks? Or balancing based on URI?
How about using cookies? for example Logged in users with Cookie A goes to backend group A and clients with no cookie set go to backend group x There is conn tarpit, how effective it is? and how it can be used to protect against DDoS attacks?

What is the most effective way to protect against such DDoS attacks?

Regards,

Ahmad Received on 2009/02/24 17:43