Those processes are server processes and they are supposed to always run in the background. In that way they are ready to be accessed by client software immediately. For why they are root: often but not always servers need elevated privileges, e.g. to open ports below 1024 or read restricted files.

Ok, seems we have different ideas of what a real ddos attack is. I was thinking level 3 attacks.

But this only covers layer 7, doesn’t it?

Care to elaborate?

I guess if you have to defend against DDOS attacks going big is the only way.

Let me guess, you posted some racist or homophobic slop and now you act surprised that most people on Lemmy think this is offensive?