How difficult attacks DDoS/Spoofing

[Enough]

Hello!

Everyone knows that DDoS / Spoofing / Syn Flood today is a headache for owners of servers, whether large, medium or high scale.

The truth is that there is no way to stop these attacks, but there is a way that hinders them here on the forum believe that there are people capable of passing tips that can help to me and several other members of this community.

*First, for people who have knowledge, how could hinder a DDoS attack without our vps DDoS protection offered by the company or purchased from third parties, only few settings and programs?

Second, there is a configuration specifies that impairs vps server crash?

Third, companies which provide services on behalf of vps with ddos protection?

I thank all those who answer, and preferably, to give greater attention to the first topic (*) that would be my case.

Thank you!

[MentaL]

[MaxZeus]

The only way to stop such attacks, is by having a properly ddos mitigation circuit, ready for this.

Generally, the only place you will find this are in DDoS Protection providers...

These solutions aren't cheap, although the cheaper ones you will find, will do an 'average job', but the most cost expensive ones, will do it in a way you will not even notice you are under attack at all...

[Enough]

Exactly, I've searched a lot of respect, especially companies that charge more than $ 300 to provide these services. I do not see such a need to buy something this size since the attacks I get are not on a large scale, but can leave my server unavailable until the attacks stop.

There is another method, which impede these attacks?

[wesman2232]

Not really. Only hardware can deter a DDoS attack as far as I know. (Then again it's more a DoS attack than DDoS. DDoS will take down giant servers where you won't even be pingable) But a lot of vps hosters will actually already have the protection.

[Enough]

Understand. But what I wonder is if there is a procedure, or even a program that is good and avoid some newbies to try something in my server.

Note: I've been taking a look at this banner ragezone, the company 'Solve DDoS' is good?

[MaxZeus]

Exactly, I've searched a lot of respect, especially companies that charge more than $ 300 to provide these services. I do not see such a need to buy something this size since the attacks I get are not on a large scale, but can leave my server unavailable until the attacks stop.

There is another method, which impede these attacks?

Actually, you just didn't consider that, once you have 'some protection', they will increase their power until you get down again :P, 99% of the times, they do it like that.

[Enough]

Actually, you just didn't consider that, once you have 'some protection', they will increase their power until you get down again :P, 99% of the times, they do it like that.

Yes, but these custom protections provided by companies more than $ 300, and donations from my server not cover this expense.

[MaxZeus]

Yes, but these custom protections provided by companies more than $ 300, and donations from my server not cover this expense.

This is correct, and understandable.

It means just one thing :

- Replan your project, re-think your donations, think it in a way to 'cover the expenses', because if the required structure to have a good service, costs more than your current project can pay, something is very wrong :) !

[Dave]

Understand. But what I wonder is if there is a procedure, or even a program that is good and avoid some newbies to try something in my server.

Note: I've been taking a look at this banner ragezone, the company 'Solve DDoS' is good?

Software on your server can not stop a DDoS attack since at that point the DDoS traffic already reached your server.

Regarding DDoS protected hosts, you have to remember that GunZ uses UDP a lot and that many hosts have very strict UDP filtering rules. And I wouldn't recommend a GRE/proxy tunnel (and I'm not sure if it will even work with GunZ).

SolveDDoS is probably a CNServers reseller? They use Cloudflare for their website so I wouldn't go with them because if you truly have DDoS protection, you wouldn't use such service for your website.

[MaxZeus]

SolveDDoS is a BlackLotus reseller, it will work, but it will not be perfect, you might get all your players disconnected when an attack start and when it ends, it will add some latency to your game and there will be false positives (moments where part of your players will not be able to connect to your server), I personally, don't recommend it, but you can go with it, if there is no other option.

As our friend stated, they need CloudFlare to defend their website, so you can check how effective their product is...

[Enough]

@MaxZeus

In fact, there is nothing wrong with my server, it is just new and the amount of players is not very high, ie, donations are not.
As for your opinion about the SolveDDoS really noticed that they use CloudFlare to protect the site, I also believe that they are a company that would provide protection, they kind should be independent and know to protect yourself with your own product.

@Dave

If they are resellers I do not know, but on their website the prices seem to be affordable and according to the propaganda, protects against DDoS attacks. You would not know you recommend any free program that would hinder such attacks and also a company that is not as expensive offering this type of service protection?
Although I believe that there is no price cheap when it comes to protection, but does not cost search hahaha

[Dave]

@MaxZeus

In fact, there is nothing wrong with my server, it is just new and the amount of players is not very high, ie, donations are not.
As for your opinion about the SolveDDoS really noticed that they use CloudFlare to protect the site, I also believe that they are a company that would provide protection, they kind should be independent and know to protect yourself with your own product.

@Dave

If they are resellers I do not know, but on their website the prices seem to be affordable and according to the propaganda, protects against DDoS attacks. You would not know you recommend any free program that would hinder such attacks and also a company that is not as expensive offering this type of service protection?
Although I believe that there is no price cheap when it comes to protection, but does not cost search hahaha

Anti-DDoS software which has to be installed on the server would never work.
Regarding DDoS protected hosts, you always have to pay more than the usual for it.

DDoS Protection - True DDoS Protected Hosting | KoDDOS is probably way out of your budget.

[Enough]

@Dave

I understand, these software 'anti-ddos' serves only to protect my apache hahaha

I liked this company has affordable for me.However, do not protect much cosa, I should at least have a protection against DDoS 2GBs, and this plan is in the house of $ 300. Can you explain, after the payment, how it's performed the installation process of this Anti-DDoS? I believe we need a change of name servers or something. But remembering that I do not want to protect my 'hosting' but my vps, where my server is hosted.

[Dave]

The only way to protect your VPS against all ports is to buy a DDoS protected server.
Changing the name servers is only to stop DDoS attacks against HTTP/HTTPS if they will filter it for you.
Say you buy a server at KoDDoS, then you will have a server which is hosted in a DDoS protected network. You don't have to install or configure anything.

You can go to this site and search for "DDoS protection" and you might find hosts which are in your budget range.

However, be sure to ask them if they have strict UDP filtering rules because that -can- cause big issues for your GunZ server.

[Enough]

If filtering is rigid in that it may affect my server? Is there a way to regulate this, explaining what server is it?

[jumparound]

Server chains.

nuff said.

[Dave]

Server chains.

nuff said.

Nothing good about that actually lol.
I'd rather have a DDoS protected dedicated server than proxy chaining.

[Enough]

@Dave

These plans would be the best to protect my server?

DDoS Mitigation - Proxy DDoS Protection - Stop DDoS Attacks | KoDDOS

If I could only afford the first option. Do you think you would have more headaches with DDoS or any other threat that wish to subvert my server?

[Dave]

@Dave

These plans would be the best to protect my server?

DDoS Mitigation - Proxy DDoS Protection - Stop DDoS Attacks | KoDDOS

If I could only afford the first option. Do you think you would have more headaches with DDoS or any other threat that wish to subvert my server?

That's not a VPS or dedicated server. You'll have to look for a VPS or dedicated server if you want the best result.
DDoS attacks will always be an issue, even when you have a DDoS protected server because you're only protected up to a certain level.

[Solaire]

Software on your server can not stop a DDoS attack since at that point the DDoS traffic already reached your server.

Regarding DDoS protected hosts, you have to remember that GunZ uses UDP a lot and that many hosts have very strict UDP filtering rules. And I wouldn't recommend a GRE/proxy tunnel (and I'm not sure if it will even work with GunZ).

SolveDDoS is probably a CNServers reseller? They use Cloudflare for their website so I wouldn't go with them because if you truly have DDoS protection, you wouldn't use such service for your website.

Software on servers is perfectly capable of stopping a SYN or DDoS attack as long as the bandwidth doesn't exceed the switch port. I've handled > 8 Gbps DDoS attacks with a Core 2 Quad at < 10% load.

[Enough]

Yes, DDoS will always be a concern. But people of good faith who do this, do not have much power to perform an attack as big, unless your server has many powerful enemies!
I believe a vps protected with 5gb bandwidth against DDoS, is already a hell of a protection.

[MaxZeus]

Enough, just don't forget, there are much players in the market, that 'advertises X' and 'delivery Y', so you should also consider this, when you are going to 'pay' for these services :).

[Enough]

@Solaire

If this is indeed possible, could you tell me how? I have many problems with this type of attack, especially DDoS, Syn and Spoofing. If you do not want to explain such information, send me by mp.

@MaxZeus

Understand. But how could I take care about something you do not know? If they offer 'X', I hope to receive 'X' if deliver 'Y' in this case how can identify DDoS protection?

[MaxZeus]

Enough, you will only find this out, once you start having issues, you shouldn't had, with the service provider.

They will generally end up lying to you, sending the received attack was higher, etc etc, so the only way to compare, is for example, having two completely different providers, however the 'cheap/budget' providers, even having many of them, wouldn't be enough to be trustable, because the majority of them, are resellers, and can't even check what is going on with your attack in reality, since they share a 'single point of failure' with all their customers.

[Enough]

Understand. Well, so donations from my server are released by the company I will be doing buying something and see if it actually avoids some problems I've been having.

Meanwhile, I'm using the D-Guard to monitor my UDP connections. Has anyone here ever used this program?