February 28th DDoS Incident Report
Am I old-fashioned to raise an eyebrow when I discover that Memcached servers are running visible to the public Internet?  This strikes me as approximately as bizarre as having a database server that accepts connections from the public Internet.In my day, such back-end services were either simply not connected to the Internet (connected via a private network to the application services), firewalled, or at the very least, configured to listen for and respond exclusively to connections from known front-end or application services.Is this sort of deployment architecture falling out of favor?  My casual observation is that cloud architectures—at least the ones I've seen employed by small organizations—are more comfortable than I am with services running with public IPs.  What is going on?  Am I misunderstanding this in some way?