DDoS protection

It depends what protection you use, the high end hardware will sure be effect.

Most webmasters do not use it, the cost of it is very high.
 
Everyone is susceptible to DDOS attacks - and mitigating them can prove to be expensive. What is worse - being down for a day or paying for DDOS protection (that may or not work)?
 
Just hide behind cloudflare, they are normally not to bad in regards to DDoS attacks.

Any other method will be costly.
At least a free option can be tested.
 
Rightly stated by Steve, every website online is susceptible to DDoS attack. You simply cannot predict when you'd be the next target. There are a few companies that offer DDoS protection to a certain degree, though an attack which is beyond that leaves the site with no protection. The best you can try is to take the server offline for sometime incase the attack is of massive intensity.
 
DDos attacks suck, and there is really no way of protecting from them. Even companies that offer protection can only protect you so much. Its like hiring a body guard to protect you. They can threaten and intimidate the enemy, but if the enemy has a sniper, your still getting hit. Cheers
 
We just have arbors at the network core and switch a customers hosting area network to go through the arbor by BGP, is usually effective unless the DDoS traffic exceeds 30Gbps, which is what the arbors are capable of scrubbing.
 
I agree, if you do not want to pay - you should atleast try our the free alternative, cloudflare :P

Some find it helpful, while others do not like it at all...
 
koddos said:
Do you believe that DDoS protection is effective?
Are there many webmasters who use it?
Click to expand...

DDOS is a problem that lot's of successfull sites face.

however it's expensive and even a DDOS mitigation solution has limit's on the amount of traffic they can filter physically.

joe
 
Most companies won't provide ddos protection because of cost, and if you get ddos'd your host will typical fold like a lawn chair and close your account.
 
taipres said:
Most companies won't provide ddos protection because of cost, and if you get ddos'd your host will typical fold like a lawn chair and close your account.
Click to expand...

If you have your own server their is cheap/free alternatives to help minimise DDOS attacks

Ddos Deflate
Mod Evasive
SYN flood Monitor

are just 3
 
Yes, as DDOS is one of the dangerous and malicious attacks in Online world and it can damage your site to a huge extent. Your site will be down for a couple of days till the attack stops and if your website is your source of income, then you might suffer huge economical losses. Hardware Firewall is the best solution for DDOS.
 
James-A said:
Yes, as DDOS is one of the dangerous and malicious attacks in Online world and it can damage your site to a huge extent. Your site will be down for a couple of days till the attack stops and if your website is your source of income, then you might suffer huge economical losses. Hardware Firewall is the best solution for DDOS.
Click to expand...

Thats true. all our servers are with datacentres that have hardware firewalls in place, but we still have ddos deflate installed on our own servers
 
Mostly webservers are protected with firewall (software), webserver modules that are enough to prevent ddos but still chances of being ddosed is there if you are running vulnerable applications on your website.
 
Hardware based solutions can be effective if you purchase the really high-end ones. Software based DDOS protection is rather ineffective unless you are experiencing a very small attack.
 
SmileServe said:
Hardware based solutions can be effective if you purchase the really high-end ones. Software based DDOS protection is rather ineffective unless you are experiencing a very small attack.
Click to expand...

We just use Software bassed DDOS protection and have never suffered ant DDOS attacks in 11 years, so i would say your statement is incorrect
 
The advantage of the hardware protection is that you can stop the attack before hitting your server itself. This often means that the other users on the same server would not be affected and only the individual account (or IP) would be regulated.

The disadvantage of the software method is that the data must hit the machine and then the machine scans and denies. This requires CPU and Memory in order to process the tasks, and with a large inbound flood, software usually can't handle it.

Years ago, one of our servers were hit with a 15GB/s inbound attack. This was a massive attack that even the datacenter was running around in circles trying to prevent network degradation. Software protection can have a hard time fighting against a 100MB/s inbound flood, but a 15GB/s it just doesn't stand a chance.

That's not to say that software protection doesn't work - it does - but on a large scale intrusion, the hardware firewalls and protection are better equipped for such instances.
 
our current server providers have hardware protection in place, but we still install software protection as an extra precaution
 
You must log in or register to reply here.

Supporters

Back
Top