Skip to content
Register

DDoS protection on budget hosts is placebo

General Discussion by blogfranck 25 replies 3.6K views
pavel_train

Member

9 #21
bird said:
Expecting a copy-paste

You will receive it. The Unix philosophy applies: a tool should do one thing well. These "protection" products do one thing poorly and obscure it with marketing. A null-route is not a tool, it is the absence of a tool.

I run my own filtering on a Hetzner dedi. Their upstream handles what I cannot, but I do not pay extra for a lie. The server is in Falkenstein, the pipe is fat, the logs are mine. This is the only transparency that matters.

WH

Member

#22

Hetzner also null-routes though. Had a 5Gbps attack, they blackholed me for 24 hours. No "protection" purchased, at least no lie told.

garykwh

Member

Inference on a Budget

#23
pavel_train said:
Hetzner dedi

Off-topic slightly but related to budget reality: I tried running inference on a "protected" VPS. The DDoS event that wasn't even mine, shared IP range, caused null-route. My model weights sat unreachable for 8 hours. Training run dead.

Moved to RunPod for GPU, no such fiction there. The budget host ecosystem copies features from real providers without the infrastructure. Inference, DDoS protection, "NVMe storage" on RAID-10 from 2014. All the same pathology.

CUDA cores are my love language
GU

Member

#24
WHITE18 said:
They blackholed me for 24 hours

This is the unspoken truth. Even honest providers null-route when the pipe is full. The difference is whether they pretend otherwise. Hetzner at least has the pipe: 10Gbps standard, sometimes more. A 5Gbps attack is annoying, not existential.

The budget hosts have 1Gbps shared and sell "10Gbps protection." The lie is the multiplier, not the null-route itself. — https://www.hetzner.com

MA

Member

#25

So what is the actual cheapest real protection? OVH? BuyVM? Something else?

tomchan

Member

#26
magicmahdi said:
Cheapest real protection

Already covered above. OVH, BuyVM with Path.net, or skip the fiction and get fat pipe at HostHatch/Hetzner and filter yourself.

There is no $3 magic. Read the thread.

works on my bench ¯\_(ツ)_/¯

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft