Options:
I will start: I work provider-side. The ticket said "our game server is under 300Gbps attack please help" and they were on a $5 plan. We null-routed them. They opened another ticket asking for a refund due to downtime. I sent them the AUP they agreed to. Dry times.
Member
I run a small hosting operation. We rely on upstream scrubbing through RackNerd. They use some combination of flowspec and rtbh. It works adequately for volumetric. Application layer is still our problem. I have considered a cloud proxy but the latency penalty is unacceptable for our use case; -- Marcus
Member
I operate several machines at HostHatch and Leaseweb. I do not trust any single layer. Upstream scrubbing is present but I also maintain a cloud proxy as a secondary path. The machines fail over automatically. It is expensive but downtime is more expensive; -- Marcus
Member
RackNerd scrub: avg 2.1ms added
Vultr proxy: avg 18.4ms added ( Frankfurt route )
Direct: 142ms baseRoute via Vultr adds 16.3ms minimum. For my use case that is unacceptable. I use upstream scrubbing only. Null-route is 0ms but 100% downtime so not a real option.
I just use what Contabo give already, lah,,,they say they have protection but I never test it,,,I buy the cheap plan,,,if attack come I just wait,,,my server-server all small project only,,,not important lah,,,if down I make new one already,,,
Member
Fun little project: I built a home lab with a NAT VPS from Time4VPS and a cheap MikroTik, set up RTBH myself with a fun little script. It actually works! Well, for the 2Gbps I tested. Real attack would probably melt it. I voted upstream scrubbing because that's what I actually depend on when things get real.
Which RackNerd scrubbing tier handles application layer?
Which mikrotik model and how much ram?
$5 plan and 300Gbps? I'd cry too
Member
None of them, really. Their scrubbing is volumetric only. Application layer still hits your origin. We handle that with rate limiting at nginx (https://nginx.org) and a few custom fail2ban rules. Not elegant but it catches the obvious stuff.