[TECHNICAL QUESTION] @RiotGradius: About DropHack, and guarding against it
Is something like this possible to implement?
Attack coming from one person (DoS):
• Set a limit of traffic coming from one player
• Track the average traffic coming from every single one
• If it exceeds a limit, take measures, like throttling the traffic from that player (to only that game/port), tagging them or dropping that player
Effectively puts an upper cap to traffic from each player, preventing a flood drop from a single source.
Attack from a large botnet (DDoS):
• Make the client push the IP of every player to the game port for every game, and allow traffic from only those IP addresses to that game
• If a player disconnects, disallow any further connections until the client from that specific summoner name pushes an IP to the port again, beginning the connection again.
Effectively allows only players who are in the game to actually communicate and connect to the game, removing the "flooding from the outside" case.
I may just have absolutely the wrong idea how the whole system works, since I don't understand too much about networking, but is something of that effect possible to achieve?