marketsmart |
06-07-2005 09:35 PM |
ddos or dos really has several factors... host core router, host core switch, and depending on how the host is set up, possibly two more switches.
and all of these devices can have different thresholds of handling traffic. a good host will have a monitoring system that will alarm at certain thresholds and will have someone available to jump on the problem quickly 24/7.
a lot of it depends on what type of dos or ddos. single machine or hundreds of machines attacking. a typical host router is going to handle certain scales of attack that will crush the capacity of a smaller switch or a server. also depends on your bandwidth. 10meg pipe wont handle the same as 100meg obviously.
so, static ip's for each site is good and should preferably be on seperate c blocks as people already mentioned. keep in mind that if all the ip's sit on one machine, multiple ip's wont have any significance during dos/ddos.
i always use seperate ip's for another reason too. lets say someone uses your domain as a spam from. well when the net police add you to their block lists, they are also going to add all your domains so they can catch you if you move to a new ip address. so, if that happens, you just lost all your domains until you go beg the police and provide proof that it wasnt you.
finally, dod/ddos are a fact of life. most are pretty easy to stop and if your host is on top of things, then downtime will be limited. but, be patient, it takes time. if you call them, call once, get a status and then leave them alone. if a major attack is going on and impacting a lot of customers, a flood of calls is just going to add to to getting everything back up again.
|