NZ Stock Exchange DDoS continues
![Image](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-HhiP9c0P3341wu5wmh9x0szZaHGavLSHWoTTN0Pbq6srBRvQ3M0Nc9vCMUXyLNnnnEHXNSf_v5mnaQKPNwLdT6w6VIPmI6IOUNNT5uPt9px71FWjfpjdNS6bFkvrF4npuO6Ihyphenhyphen6GFtM/s640/No+Servers+are+Available.jpg)
The New Zealand Stock Exchange is having a rough week. Under assault from a sustained DDoS attack, its web servers have crumpled and fallen in an untidy heap again today, the fourth day of embarrassing and costly disruption. DDoS attacks are generally not sophisticated hacks but crude overloads caused by sending vast volumes of data to overwhelm the servers. The Host Error message above shows "RedShield" which appears to be a security service remarkably similar to a Web Application Firewall (although the company claims to be producing something far better) ... If so, RedShield appears to be passing DDoS traffic to the stock exchange web servers which can't cope. Presumably, this particular DDoS attack does not fit the profile of the attacks that RedShield is designed to block, in other words RedShield is patently not preventing the DDoS. I don't know whether RedShield is supposed to block DDoS traffic and is failing to do so, or if DDoS protection is simply not pa