Stop HTTP DOS Attack

I'm assuming via the explanation, that if a connection has more than 5x+ within a 1 second period it will be blocked for 10 seconds.

Better yet, I would suggest this: for DoS attacks (via a single source-- not many "reflectors").

Otherwise if your server is being hit directly and NOT your webserver, and is being hit hard (via a DDOS ATTACK), the only way to slow it down is good firewall hardware, because there is no way to fully stop a DDoS attack.

Good firewall hardware can become more and more expensive, depending on the severity level of the attack you're experiencing. ;P
 
To stop it, you would need to use something as HWP (specific service to provide HTTP Attack Mitigation), it works nicely. :)

JtqfWRP - Stop HTTP DOS Attack - RaGEZONE Forums

huwbRjh - Stop HTTP DOS Attack - RaGEZONE Forums


It is a nice service from :)
 
Yeah, the best way is the load balancing what Hyperfilter and some another services making, but if you want you can make a simple anycast system with some cheep vps :'D

Anycast or Cheap VPS cannot solve it, as it doesn't perform HTTP Traffic Validation at all, these things requires very specific equipments working on this for you, and for sure, you need specializing companies on this.

Of course you can try as much workarounds you want and it may solve some issues, but it won't be a final solution. :P
 
Anycast or Cheap VPS cannot solve it, as it doesn't perform HTTP Traffic Validation at all, these things requires very specific equipments working on this for you, and for sure, you need specializing companies on this.

Of course you can try as much workarounds you want and it may solve some issues, but it won't be a final solution. :P

Yes I know it, I am Win sysadmin and Network administrator, it was just a simple example, because I am using anycast systems to protect my hosting website and under 100-150 gb its totally okey.
 
Yes I know it, I am Win sysadmin and Network administrator, it was just a simple example, because I am using anycast systems to protect my hosting website and under 100-150 gb its totally okey.

Can you describe anycasting ? :) Because unless you have control of your own IP Space and have your own ASN, you aren't doing it at all, you are calling it as anycast, but surely not doing it.

Anyways, if you want to be safe against all types of attacks you'll need something better than only taking a few VPS and making some sort of round robin between them.
 
Last edited:
Back