DDoS Protection

Portal Home > Knowledgebase > Articles Database > DDoS Protection

Posted by dev_to, 03-20-2011, 06:35 PM
Hello, is there something a "normal" person can afford which protects your server / websites against DDoS attacks ? Maybe something like a service i can buy without moving from my hosting provider ? Furthermore how does real DDoS Protection work ? ( No not Cisco Guard etc. ... =D ) Maybe you can recommend me some general things about what to do when a DDoS occurs. I'm a little helpless in such situations and when the datacenter null routes your IP you only can be more helpless. Thanks
Posted by hungry4knowhow, 03-20-2011, 06:47 PM
You will probobly have better luck posting this in the Dedicated Server forum or Hosting Security and Technology forums.
Posted by ddosguru, 03-20-2011, 07:38 PM
There is no cookie cutter answer to this, every vendor is going to have their own perspective of what entails "real DDoS protection" and will offer varying levels of service. Some are effective, others are not. It's best to start by evaluating your vendor's reputation and asking for references.
Posted by Onepamopa, 03-21-2011, 07:23 AM
There's a way yes, but it depends on the type of content you're hosting (is it a website, or a live gameserver, etc). And of course - your budget. Im using such service for my gameservers, it works great. Last edited by Onepamopa; 03-21-2011 at 07:28 AM.
Posted by asciiDigital, 03-21-2011, 11:14 AM
This might be what you're looking for: http://www.blockdos.net/
Posted by dev_to, 03-21-2011, 02:15 PM
Okay thanks. I believe there won't be any DDoS Protection for costs under 100$ which are serious and which i can rely on ? Most of the offered services i found are very high priced. Does anyone has experiences with "http://ddosdefend.com/ddos-protection.html" ? BTW: I'm only hosting websites.
Posted by thomson1, 03-21-2011, 07:30 PM
There are some paid services that offer DDoS protection, but the best you can do on your own time is install iptraf and a couple other tools and monitor the traffic yourself. It's pretty easy to spot and shut down an incoming attack when it starts.
Posted by glendo, 03-21-2011, 10:33 PM
Most hardware DDoS protection is very expensive, There is some avaliable software but its usage is limited to smaller attacks. There are settings in CSF to try and deter DDoS and other such attacks, Also DDoS Deflate may be an alternative, basically IPs with too many connections get banned, For true DDoS protection and mitigation you will need to empty your pockets!
Posted by tulix, 03-22-2011, 12:54 AM
DDos mitigation is expensive. In my opinion because of the 3 reasons: traffic - incoming traffic could be expensive - even couple of hundred of Mb/s could cost a lot, Gb/s will cost much more. Providers can use some BGP tricks - but then it would manual labor involved. Network hardware has to be expensive - to handle big number of PPS, otherwise the whole network can be shut down. Smart scripts - some DDos attacks are based on bad requests which are killing servers, even number of them is not that big - every time new pattern - manual labor (expensive) has to be involved. Sometimes number of computers, involved in the DDos attack is so big, that hardware just reaches their limits. Again expensive. Smaller attacks could be handled by almost any size of the hosting companies if they know what they doing.
Posted by Onepamopa, 03-22-2011, 03:25 AM
Well, Im paying 350eu for web ddos protection, Dont know if you can afford that price.
Posted by servermanaged, 03-22-2011, 04:32 AM
Hi squiz0, for DDoS protection you can look also at http://dragonara.net/ddos-protection.html Cheers.
Posted by PeakVPN-KH, 03-24-2011, 02:33 AM
Apparently you are not seeing many DDoS attacks? Do some real research but finding any protection worthy of spending money is going to cost above $100/month. You can find shared/cloud hosting with protection at prices less than $200. Otherwise, there are protected providers like Take2Hosting which offer protection to their customers by default. They don't intend to specialize in mitigation so don't attempt taking a 500Mbps+ attack there and expect they will do it free. However, small attacks - we have found they are an excellent choice for real protection with a server, at really no additional cost. The other option is going with a specialized company. Blacklotus.net offers cloud servers at great pricing to fit into most budgets and include real protection.
Posted by viGeek, 03-24-2011, 05:53 PM
Really depends on the type of attack, we went with a variety of different lower cost solutions ie. $1000 month including some of the more popular options named on WHT. It wasn't until we switched to prolexic (which subsequently is nearly $10,000 monthly) that we feel confident in our DDOS capabilities. Overpriced but they're a true enterprise DDOS solution and the amount of revenue potentially lost during an attack, it's worth the expense. We utilize our own in house methods for smaller attacks, which is largely just taking advantage of some Linux utilities and custom scripts.
Posted by PeakVPN-KH, 03-25-2011, 02:46 AM
If it works and you have the budget then I guess it doesn't matter but the reality is that you can buy a Bentley or you can buy a Mercedes. Both are luxury but one is 10x the cost of the other and the reputation is likely as solid on both sides.
Posted by RRyan, 03-30-2011, 08:47 AM
No, do NOT check dragonara. http://www.webhostingtalk.com/showth...ight=dragonara
Posted by TheVisitors, 03-30-2011, 10:01 AM
http://www.CloudFlare.com may help And this would not hurt either, http://deflate.medialayer.com/
Posted by viGeek, 03-30-2011, 11:23 AM
A ddos project I'm working on, has some helpful modules already still bunch to do. https://github.com/viGeek/ddoSutil
Posted by damoncloudflare, 04-04-2011, 09:13 PM
Hi, I just wanted to clarify that CloudFlare isn't a 100% DDoS solution & you would want to have other solutions in place to cope with attacks. While we can help mitigate some attacks, we will go direct to your site if the attack is too large.