Printable View
hi dudes,
Since EP8 has been released, have a War between servers, so , seeing this i want do my server more secure.
I want to know, how much traffic is necessary by connection to implement in firewalls, and ASA
Ex:
One player connected must have xx of bandwidth to keep connecter without lag
So, this way limit bandwidth to an connection
What the hell do you think that will accomplish? Nothing. Software firewall won't stop DDoS.
No firewall will protect you. If it's large enough it's very difficult to manage.
i don't talk about software.. i'm talk about firewall (ASA CISCO) <- this is a Hardware firewall, search and you will see :wink:
And i know, we can't stop DDoS, but we can mitigate this
;) you need to buy one
DDoS | DDoS Protection | Anti DDoS Attack, Get Protected for $29/month - HyperFilter - DDoS Protection Solutions i think this and cloudflare for website are good enought ;)
@Skpike
Thanks for your answer but, i don't want to buy, i'm here to request just the..
How much (bandwidth) is spent for a player, to me implement in my ASA CISCO
ASA Cisco won't do the job, you are pretty wrong thinking a "Firewall" will do the job of a "Mitigator", both are completely different things, and any type of decent mitigation device, will start at U$$ 180.000 in Price Listing and won't be available for you be using in your dedicated servers, unless if you are planning to pay a highly monthly price, or you buy one of such units for yourself.
Not to mention, the cost of having your own router and 10G transit port (at least).
The cheap option, is renting services from such companies, which makes it affordable for you.
@Fr3DBr
i know, I CAN'T stop it, i want just the decrease it.
anyway, can you tell me one more thing?
When Channels appear FULL and players can't connect, why reason?
any hack or DDoS? and how we can protect us if possible.
Thanks
When channel appears full but no players are online it means some one is DOSing your World svr port.
Block his IP or make a script to automatically block single IP with to many connections.
DOS and DDOS are different.
i know, DoS is different DDoSQuote:
Originally Posted by toast2250
Thanks toast,
Cloudfare is so useless.Quote:
Originally Posted by oOSpikeOo
If your connectivity like is full, there is nothing you can do about it, this is why you need a mitigation company, so they can clean up the bad traffic and send you only the good traffic.Quote:
Originally Posted by magraopb
Also don't expect to cope with DoS or DDoS using a (firewall), they are not meant for this and you'll be just losing time, really.
@Fr3DBr
My job is into a Phone Company, so... we can do it, we can filter traffics before sent it to my home, my IP is static, connection is Optical Fiber, so.. (in my case) it's possible.
My Question since begin is:
One player connected must have xx of bandwidth to keep connecter without lag
You can't define amount per player, it can vary and the variation is not linear, it is exponential, because in a mmorpg, it depends the location the player is, number of mobs, number of nearest players, number of other active objects and so on.Quote:
Originally Posted by magraopb
It can be 10 Kbps or 2000 Kbps per player for example, you can't really calculate this...
I was thinking in your doubt and come with this up :
- So you think by limiting the bandwidth per ip will do the job ? You are entirely wrong...
Most of the advanced attacks are spoofed, generating up to 200.000~300.000~1.000.000 or even more randomized ip's per second, i'm sorry but you will not be able to limit bandwidth in a case like this and your link will end up full.
you can protect against normal ddos by having 2 lines of 10 Gbps (rly expensive) since the max ddos u'll get on a private server won't ever be above 20 Gbps ... and u'll also need a farm of server (about 20 should do the trick) on more layers (4 per layer so a total of 5 layers with load-balances in-between and different firewall settings), that's how the major companies do it, ddos protection on a home line (max i know of is 1gbps) is IMPOSSIBLE :D ofc u can filter a small attack ... but nowdays even the skript kiddies can do more that 1 gbps :)