Adjusting distribution policies can concentrate traffic on specific nodes causing DoS or redirect flows through unwanted paths.
Networking / Loadbalancer / Threats / DEV
Traffic Distribution Is Manipulated
CCC.LB.TH03
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.LB.CP02 | Dynamic Load Balancing | Employ load balancing algorithms that consider the current state of servers before distributing traffic. Load balancer adjusts traffic distribution in real-time based on the current server health, resource utilization, and traffic conditions. |
| CCC.LB.CP20 | Traffic Splitting / Weighted Routing | Can distribute incoming traffic across multiple backend resources based on predefined weights or percentages (e.g., for canary deployments, A/B testing, blue-green deployments, or gradual traffic migrations). |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.LB.CN04 | Enforce Distribution Policies | Ensure traffic-splitting weights and algorithms are modified only by trusted identities. |