How to protect your site from DDOS?

Portal Home > Knowledgebase > Articles Database > How to protect your site from DDOS?

Posted by goldmedal3, 04-06-2015, 03:08 PM
So yes i have a website and i use Cloudflare, i even bought the "Pro" package. I have set up the records correctly( i think) so you can't find my actual IP. (I am hosting the site on VPS.) But yet my site still keeps getting DDOSed. Usually not that it wouldn't load at all but it takes extremely long to load, most of the time i get the cloudflare error 522; connection timed out and so on. So i believe the attackers are using Layer 7 attacks to penetrate through the Cloudflare? What would you recommend me to do? I can't afford the 200$ Cloudflare plan or any other solution that is so costly
Posted by my247webhosting, 04-06-2015, 03:45 PM
Well you need to find the type of attack first Check server logs Harden the server for basic rules stop syn attacks and also get firewall installed on server
Posted by marketingforwebhost, 04-06-2015, 03:57 PM
Cloudflare like MOST DDoS protection service is a black box solution. There isn't adequate information given to end customer about the attacks and flows. You have to investigate yourself what is getting through and causing problems. It's also a false assumption that fronting things with Cloudflare protects your IP from being known. There are many ways to expose the real IP. Review your web server logs and get an idea of the activity when things crash / become unresponsive. Layer 7? Could be that and as simple as making a few simultaneous requests to something slow on your site. Firewall plus iptables rules and other common iptables-based throttling should help, given the attacks are very small. There is one company that offers DDoS filtering and does so at a low price and actually comprehends the technology, challenges, etc. BuyVM. They offer Layer 7 free enhancement for customers. Price of a VPS + filtering addon = $5-40+ a month depending on VPS package you purchase.
Posted by S-Jack, 04-06-2015, 03:59 PM
DDoS protected hosting OVH's filtering is amazing, our main site got an attack full on for 10 days which couldn't be filtered by CloudFlare and was a layer 7, switched to an OVH dedicated server and we were back online and in action. Since that day we've not gone down since.
Posted by TmzHosting, 04-06-2015, 07:45 PM
Was this included in your dedicated server price? The DDOS service. - Daniel
Posted by S-Jack, 04-06-2015, 08:52 PM
Of course it was! That's what sold me, I did try my backup server to see if it was the IP but it didn't stop :I