HTTP/2 Web Performance Characteristics with Link-aggregation Mode Under DDoS Attack

The HTTP/2 Web server is widely used in Internet service. Furthermore, attacks known as distributed denial-of service, or DDoS, were popping up online. HTTP/2 not only allows multiple requests per connection but also protects against DDoS attacks. This paper focused on network link aggregation for bonding multiple Gigabit Ethernets of an HTTP/2 physical machine. Also, we used four link-aggregation modes with no special network switch support, including Round-Robin (Mode 0), Load Balance (balance-xor) (Mode 2), Balance-TLB (Mode 5), and Balance-ALB (Mode 6). We evaluate h2load performance under 3 Gigabit/s DDoS attacks. The results show that Round-Robin (Mode 0) can be served over HTTP/2 as a normal service during a DDoS attack. In addition, Balance-ALB (Mode 6) can be serviced like Mode 0, but this mode has lower performance compared to normal service. However, Mode 2 and Mode 5 can't be served while DDoS attack sizes exceed 20 KB. This paper can conclude that only round-robin mode can protect against DDoS attacks. Although HTTP/2 can protect against DDoS attacks, it can also work after link aggregation