DDOS attacks - How do you prevent them from happening?
 

http://www.cisco.com/en/US/products/...d800fa55e.html

Do you need one of these set up by your servers? Is it up to you to pay for this or should your hosting company have one to look out over all the servers that they are running?

I wonder how much one of those babys goes for

about $72k

Well id hope any place i hosted with had the smarts to have a good ddos protection guard on their networks if they didnt they would just be setting the networks up for alot of downtime and loss money.

$66k

I think all hosting companies should have one in the co-location facility looking after their clients.

You don't piss important people off.

usally the hosting company will null route your ip until the attack stops

Should all hosting companies have adequate hardware to prevent this?

just found this http://reviews.cnet.com/Cisco_Guard_...-31208569.html
so 72K is about right...

Wow, thats one elite piece of hardware. I wonder which, if any of the major webhosts use them.

the ones that do don't post at GFY ;)

theplanet, rackspace and i think EV1 might have it

Dont you think Web Air, Jupiter, Mojo. ISPrime etc should have hardware like that?

nulllroute IP being attacked

If you null route that would mean your site goes down right?

Get a host(s) with big enough pipes they can't get flooded and then make sure they're nice enough to be able to throttle down upstream requests if necessary.

Mensniche who have been fucked for nearly 2 days now and totally down host with Cave Creek.

I was wondering about Isprime also. They host some of the biggest porn sites online, so I imagine they do have some kind of effective protection that guards against DDOS attacks, whether it be hardware or software.

The IP that's being attacked

So you could just get a new IP really quickly?

In my opinion all of them should have something like that period.

I DO know that EV1 has them in place.

Go with rackspace if uptime is important, words can't describe how great they are

Now from a technical point of view.

Those hardware pieces are great for minor attacks. They do not stop large attacks.

Just like your anti virus software always needs updates because the virus makers keep getting smarter. The same analogy applies. Most hosting companies have hardware in place. However when an attack happens it doesn't mean there is 100% percent protection.

What is being suggexted in this thread is that hosting companies should buy the newest and latest equipment everytime it comes out to protect 100% against attacks. If hosting companies did that simple virtual accounts would cost $100's of dollars a month to keep up with the updates.

Now saying that most big routers that your hosting companies use does prevent most attacks. The mensniche attack is a new attack that can be studied later and prevented against.

I know for a fact Cave Creek has good equipment and they are doing everything within thier power to stop the attacks.

These types of attacks can happen to anybody at any time this is one thing I always warn against when hosts say they guarantee 100% uptime.


<time for hosts to flame me now>

The hardware works great for "large attacks", depending on what your definition of it is. I had a 700mbit syn flood attack at theplanet a while back and the attack was blocked and filtered within 15 minutes

DEPENDING on the type of attack.

Theplanet was also attacked not long ago and it wasn't stopped.

I would bet most don't, anyway this sort of protection comes at an (justified) additonal costs most people in here don't even think about beeing possible to pay in hosting :winkwink:

................

Script kiddiots/mailers are important people? :1orglaugh :1orglaugh :1orglaugh

Oh look the kiddiots give us CCIE advice...

I don't know what the fucking planet you are on, but $100k+ of Cisco/Juniper equipment is not gonna stop a 15Gbit/sec DDoS on your dialup modem....

The problem with something like that is it is very expensive and most customers in adult dont want to pay the added expense for equiptment like this. Everyone in this business wants their hosting for little or nothing and it doesnt give the hosts a choice to buy equiptment like this when they are making small margins to begin with. If you were willing to pay the added expense for this type of equiptment thats a different story, but most are not willing to foot the extra bill. Just my :2 cents:

lol, damn Jedi is stupid

pretty good investment if you want to keep your hosting company around for a while :2 cents:

Quote:
Originally Posted by Cavecreek.com
Cavecreek has grown to become one of the largest bandwidth providers in the world.

I don't know about this.

There are a lot of really good points in this thread.

I think this one is one of the best:

A lot of hosts have the capital and even the in-house expertise to setup and maintain a piece of hardware capable of preventing (almost all) DDoS attacks. However, all the time and cost put into implementing something like this translates into the need for more revenue.

It's no different then buying really high quality movies for your site. If you buy well shot, attractive model movies, you expect to pay more and in turn, charge your customers more.

RIP
EIGIRP
GIRP

Sorry flash back from my CCNA class

not exactly, it doesn't make sense for most companies to spend >$200,000 to protect only a handful of customers

also, don't forget that you typically need this as well, which costs another $37k, and then staff is needed to maintain and monitor it as well

if you happen to attract attacks, then you should pay the premium for a company liek rackspace to handle your servers :2 cents:

It all comes down to $$$$, if there are customers willing to pay for it hosts will install it. But i do not think maybe pure adult hosts will be running out to install this since most adult guys want everything for nothing and are not willing to pay for it but want it included for free. Tell me would an adult guys like to pay an addtional $1500-$2000 a month for this protection? Im sure not too many would be.

I was called an Idiot for replying similar to this in another thread. But I agree 100%

Anybody need hosting for $1.99 a month unlimited bandwidth? :1orglaugh

I have one of those in my bathroom