Skip to content

Successfully defended against my first DDoS on budget hosting

Reviews Locked by harbourops 13 replies 2.8K views
This thread is locked — new replies are not accepted. (Duplicate — see the earlier thread on this)
6 #11
zoekyo said:
Until someone decides your quiet mind needs 187 Gbps of attention.

I apologize for finding this amusing. I too prefer minimal infrastructure. Yet I acknowledge that when attention arrives at 52 Mpps, one appreciates that someone else operates the scrubbing layer. I am sorry for the intrusion of my reply.

#12

Thanks for explaining GRE! So its like a VPN but just for moving the clean traffic? Still sounds like wizardry to me but I get the idea. Mpps = million packets per second right? That's... a lot of packets.

#13
lee_mcr said:
OVH used to bill scrubbed on some plans

OVH's game protection and permanent mitigation are still separate products with different billing. Their "Anti-DDoS" base is free but if you want the game-specific profiles you pay. Not comparable to Hetzner's included standard protection, which is closer to what OVH calls "Permanent Mitigation" on the non-game side — https://www.hetzner.com/cloud

I get paged for this stuff. Standard protection that actually works without waking me up is worth more than the VM costs.

It's always DNS. Always.
#14
nate_pad said:
Mpps = million packets per second right?

Yes. 52 million packets arriving every second. Small packets are worse than large ones for most gear because the overhead is per-packet, not per-bit. A 187 Gbps flood of jumbo frames is easier to handle than 52 Mpps of 64-byte garbage. The Mpps number is the one that kills cheap hardware.

blubhyper said:
Bare metal or at least first-level VM for the tunnel

Agreed. My tunnel endpoint is a first-level cloud VM, not nested. The application server behind it is separate. Layering matters.

Thread closed

Replies are closed on this thread. Duplicate — see the earlier thread on this.