DDoS Question...

I'm just trying to think of an escape route just in case my site got DDoS'd - it's unlikely, but you know how it goes: prepare for the worst and all that...

At the moment the best I've thought of is having two servers... so, I configure my domain to work with two sets of nameservers, and when one server get's pinged, I move to the other.

But, am I right in thinking people DDoS the domain rather than the actual server? If that was the case, there couldn't possibly be an escape route? Unless, somehow, I managed to divert it all to the inactive server??

It's bugging me... all insight is appreciated!

Well... I bought it today, so far so good:

http://www.blackhatworld.com/blackhat-seo/buy-sell-services/262545-secured-blackhat-bulletproof-us-based-hosting-dmca-our-spam-list.html

people ddos the server

You can't manage ddos attacks yourself, get someone to do it.

I Am a senior network analyst. there is no run away for a DDOS Attack really. here is an example: if your website can handle 1 meg down and 1 meg up and the DDOS attack is shooting at 40 MEGS ... they will take you down no matter how good your firewall is

amordeaa said:

I Am a senior network analyst. there is no run away for a DDOS Attack really. here is an example: if your website can handle 1 meg down and 1 meg up and the DDOS attack is shooting at 40 MEGS ... they will take you down no matter how good your firewall is

Click to expand...

This guy is spot on.

The real question though, why are you afraid of DDoS attack? Have
you pissed off the wrong people? Chances are you are worried about
something that you shouldn't be. This is likely something you don't
need to worry about at this stage of the game.

we all have been under DDOS attacks at some point. Even big sites like facebook and twitter get DOSED except they have a good OC-12 back connections that can handle the load, only poor people with only 12 in 12 up are afraind lol

This is one of my concerns also. What I have done to lower the risk is to separate all my big sites in different servers each. Keep everything separated. Then, at most I will lose one of my sites and once it happens then I can worry about how to mitigate the attack.

would www.cloudflare.com not help?

what about webhost like Blockdos and Dragonara?

tb303 said:

would www.cloudflare.com not help?

Click to expand...

Usually cloudfare will '' help '' you or your server where are you hosting your site(s) to get more requests than usual ! They aren't mitigating anything only thing what they do it's to act like a proxy between your site and internet requests !

Dax0r said:

what about webhost like Blockdos and Dragonara?

Click to expand...

BlockDos and Dragonara are in bizz since long , I don't know about Dragonara but I know BlockDos can mitigate up to 100mbs with easy on their small packets if i`m not wrong ( didn't checked their services since looong ago - check with their sales ) .

In my honest opinion only way to truly handle an ddos attack over your sites/servers is just to handle the flood balancing the traffic . In this days solutions like rackspace provide it's seems are pretty decent to handle '' everything '' . Still days when any scriptkiddie with 2-3 roots can take any site down are long over , this days even basic hosting packages offer basic ddos protection most of the time enough for small sites ( which is your case ) ... Of course for '' big dogs '' there is nothing to worry , just get your own datacenter(s) , your own data transporters globally and you are just fine lol .DDOS exactly this means , loads of '' traffic '' comming to '' you '' traffic costs moneys / transport of datas over the network costs moneys ... you don't have to worry about it until you get big - when you are getting enough '' big '' then you don't have to worry about the costs involved to keep your business up and running .

I still can't figure out why the OP is worried about DDOS unless he has incurred the wrath of someone. I mean who else on BHW actually worries about this?

Staminus hosting seems to be reliable too.

LyNHS said:

I'm just trying to think of an escape route just in case my site got DDoS'd - it's unlikely, but you know how it goes: prepare for the worst and all that...

Click to expand...

Okay, fess up. What did you do? lol

amordeaa said:

I Am a senior network analyst. there is no run away for a DDOS Attack really. here is an example: if your website can handle 1 meg down and 1 meg up and the DDOS attack is shooting at 40 MEGS ... they will take you down no matter how good your firewall is

Click to expand...

While slamming resources at a domain my overload the available bandwidth, there are alternative mitigation techniques. Round robin DNS, blocking IPs via IPTables, setting acceptable timeouts etc.. There are even ways to prevent an attacker from exhausting connections through a layer 7 attack but to assume that there's no recourse against an attack is not accurate.

If you want to protect from ddos then sign up for free service at Cloudflare

I use it to protect my sites and it gives you stats of everything for free too. Can't beat it