Denial of Service

Denial of Service (DoS) is all about making something unavailable. There are many types of DoS attacks, but a well known variation is overloading a system to the point that it can no longer service requests. In the Kubernetes world, a potential attack might be to overload the API server so that cluster operations grind to a halt (even essential system services have to communicate via the API server).

Let’s take a look at some potential Kubernetes systems that might be targets of DoS attacks, and some ways to protect and mitigate them.