Dedicated Server Hosting Company that can protect against DDoS ?
 

Hello,

We are hosting some servers now with OC3Networks, but I feel that we must find another hosting company (although we are customers for more than 2 years)

It seem that OC3 cannot stop a DDoS attack :) and are not willing to buy some hardware firewall or offer us any solution.

What is more hillarious is that I am sure this attack is made by some kid trying to have fun.

So .. we are searching for a company that can offer 2 servers (for the start), intel 3ghz, 2-4 gb ram, 100 + gb hdd, and guarantee a protection against DDoS attacks.

We have been down for about 24 hours , so I need to move by tomorrow morning (monday)

Please post only serious companies.


Thank you

no one can guarantee protection against DDoS attacks
if you are looking for a reliable hosting company check out webair

I rarely agree with you, but this time I will.

On the other hand , does the client run a decent firewall and has the box been " hardened ".
I know if needed I can get a cisco router put in place to block a specific attempt, but that hardware cannot be dedicated to one client, unless he does pay for it.

Got rid of this mini one this morning :

http://www.pdgcash.com/gfy/attack06152008.png

I'd suggest NatNet. While they can't guarantee to stop DDoS attacks, their staff definitely can handle it at their routers to stop the flood of inbound requests. One thing I do love about their service is they are pro-active about protecting their network rather than re-active. They don't wait for a problem to start before looking for ways to stop it.
WG

I think the first question that any company you speak with is going to ask is: why are you being attacked? Any idea?

they seem to happen often, why hasnt something been developed to deal with them? The person would become very rich.

As has already been mentioned, no one can guarantee protection against a DDoS attack. It takes very specialized hardware, and a specialized network architecture and operation to help combat against DOS attacks. We are not a DDoS host, there are a handful of companies that I know of that offer this type of service and pricing for the service reflects the infrastructure required to mitigate (or mostly mitigate) an attack.
We have spent many man-hours optimizing your server to perform as best as possible under the circumstances however without specialized hardware firewall in front of your machine, you've reached the limit of how far your machine can be pushed to perform under the DDoS attack.
A hardware firewall to surpress the DDoS will be very expensive, and would require a long-term commitment to keep the firewall as we would have to make an investment in the hardware for you, and there'd be no reason to do that if you simply cancelled the firewall 3 months or less down the line.

We have offered you a solution, its a product called ProxyShield which will deflect the DDoS attack and only relay legitimate traffic to your server; you either seem disinclined to follow up on it or it does not fit your budget. Either way, there isn't anything more we can do for you if you are not able to fit that into your budget. There isn't a magic answer or solution to a DDoS attack. It takes a lot of very expensive hardware to protect against it and even then its not 100% perfect.
I'm sorry you are getting DDoSed, but don't forget almost 99% of all DDoS occur as retaliation to something the victim did/said/acted on the Internet.

Its obvious that we can handle the attack, as no other customers are affected by your server being DDoSed, however we are not a specialty host that claims to offer DDoS protection on this level, and we have already spent a lot of time helping you trying to defeat it; so we can at least definitely be credited for customer support.

Because DDoS (Distributed Dinial of Service) attacks look like real user traffic so there is no way you can block the attack without blocking users. Its just not possible :)

Good thing is they are very expensive so they rarely last more than 3-4 days.

I've seen many hosting companies talk about DDoS protection, its just a lie they (we) use as a marketing argument. The same goes for those who claim to have "Tier 1" connections, thats another lie :)

thank you i didnt know that

This was a pretty disgusting & unwarranted attack on OC3.

You should be ashamed of yourself. But hey keep burning bridges!...It's your business.

Something tells me this kind of attitude is behind the DDoS attacks in the first place.

:thumbsup very classy response from a great company, kudos OC3 :thumbsup

If an ip loads the same files over & over again....And you're running a simple static content site, its pretty easy to block the fake from the real.

Theres only so many ip's botnet users have at their disposal.

A company who specializes in stopping DDoS's/or firewall.... knows the behavior of such scripts/programs & can adapt almost as quickly as the botnet runners.

Of course if you have several botnet owners coordinating the attack....then yes...theres almost no way to alleviate the attack.

I was ddos'ed a few years ago, and Oxeo (www.oxeo.com) did a great job fighting off the attacks. You should reach out to them. Their customer service is the best by far. It's almost like they look forward to helping you with issues.

As far as coming up with a solution for ddos attacks... one exists, but from what I know, it's not cheap. As someone stated above, ddos attacks make it look like real traffic is hitting your site. The anti-ddos application basically runs in the background while your site isn't being attacked, quietly collecting a database of "real" traffic. Once your site is hit with an abundance of fake traffic, your firewall blocks all unrecorded ip addresses until the attacks stop. During this time, all unfamilar ip addresses will temporarily be blocksed, including new traffic. That's the only downside to this, but it's a lot better than having to shut down your server for 24 hours (which seems to be the standard protocol for most webhosts that I've dealt with). Once the attacks end, then the filters are removed from the firewall.

I recently had a meeting with sales rep from Rackspace and this conversation came up. THey offer this service, but it's crazy expensive.

Soon, I'd imagine this service will be available to all webhosts. Ddos is big business right now. No need to offer a solution when you can charge insane amounts of money for it. :)

Very professional. Blame the victim, he was also wearing shorty short shorts and that's why he got ass raped. Almost 99% of DDOS are by competitors / extortion, the common pissed-off guy has no clue as to even what a DDOS is.

The kid ddos'ing my site did so because my community didn't kiss his ass. He came to the board, created a thread insulting my members, and threatened to "shut down" the site if anyone talked smack to him. They did, so he did.

My webhosting company at the time (i don't remember who they were, but they were horrible) asked the same question: "did you do anything to provoke this guy?" It upset me that they even asked that question. I'm your damn customer.

try gigenet.com heard them to be the besat for ddos protection

Webair can help you!

Talk to Mike

Milan this is just stupid. You forget that someone from competition can attack you to kill your sites so he could be no 1 . Have it just crossed your mind ?

I am starting to think that the best defense can be by fighting back. Can anyone give a hand ? I know exactly who is attacking me.

Well it's depend how strong ddoss attack is.If it's medium sized then you can simply take hosting company speciliazed for ddos attacks and such company charge for hosting extra 200-300 dollars.But if it's too hard ddos attack then only prolexic help but prolexic cost 9500$ monthly which is way toomuch.

So .. as far as I see .. there is no company that can host your servers and protect you. All host you when you are fine .. but in case you run into problems.. they would rather wash their hands and loose a client than doing something to protect yourself.

How very nice.

Wrong,as i said already there are companies speciliazed for ddos attacks but they cost little more bucks then ordinary companies.

anyone here that could find out that info for you.....probably already knows whos doing it :winkwink:

Hi, I can help you get setup on a NationalNet server. We have systems in place to deal with DDOS attacks. We have active monitoring which automatically detects traffic anomolies and also subscribe to third party DDOS mitigation services that can be swapped onto your server within a very short time after a DDOS attack is detected.

Please email me on [email protected] with your hosting requirements and any other questions and I will help you.

cheers,
Luke

Fighting back, unless you have massive bandwidth and a diverse number of network points, such as bots, (otherwise they can easily block your counter-ddos) at your disposal, is a very bad idea, and will likely make matters far worse.

A better approach is to determine the nature of the ddos and seek out ways of filtering / diverting the attack away.

Also, if you have friends that know folks and/or themselves are in the hacker / bot world, they may be able to put pressure on the person(s) to stop ddosing you.

Again, fighting back with counter-ddos is a very bad idea - you could find yourself getting ddosed even worse than before.

Ron

I think you need to do a bit more research on the topic. Sites as big as yahoo have been successfully ddos'd. You on the other hand want to live in a perfect world where your $150/month dedicated server can fight off forest fires all on its own.

Looks to me like OC3 has offered you up some fixes to your problem that you have not said anything about in this thread. If one of my boxes starts having problems... I don't expect a free upgrade.

Hi - We would be happy to send out a quote for hosting with CaveCreek - and we've got extensive first hand experience in dealing with DDOS attacks. After all, we have to protect our own CCBill network as well, so you're certainly going to be behind all of our own firewall barriers as well. Shoot me an email at andy @ ccbill.com and I would be happy to send you a quote for our rock solid hosting at CaveCreek. Thanks!

I'll be happy to give you a quote too! We are usually successful in protecting ourselves and customers from DDos attacks. We just got attacked month ago, by 4000 Korean servers (at least it was the ip of koreans) and were successful in blocking them all while not taking down our connection.

You can send me an email to ryan @ pie. us. We're a hosting company in San Francisco! (and yes, cybernet rocked!!!)

I agree!!!