I apologize for finding this amusing. I too prefer minimal infrastructure. Yet I acknowledge that when attention arrives at 52 Mpps, one appreciates that someone else operates the scrubbing layer. I am sorry for the intrusion of my reply.
Successfully defended against my first DDoS on budget hosting
Thanks for explaining GRE! So its like a VPN but just for moving the clean traffic? Still sounds like wizardry to me but I get the idea. Mpps = million packets per second right? That's... a lot of packets.
OVH's game protection and permanent mitigation are still separate products with different billing. Their "Anti-DDoS" base is free but if you want the game-specific profiles you pay. Not comparable to Hetzner's included standard protection, which is closer to what OVH calls "Permanent Mitigation" on the non-game side — https://www.hetzner.com/cloud
I get paged for this stuff. Standard protection that actually works without waking me up is worth more than the VM costs.
Yes. 52 million packets arriving every second. Small packets are worse than large ones for most gear because the overhead is per-packet, not per-bit. A 187 Gbps flood of jumbo frames is easier to handle than 52 Mpps of 64-byte garbage. The Mpps number is the one that kills cheap hardware.
Agreed. My tunnel endpoint is a first-level cloud VM, not nested. The application server behind it is separate. Layering matters.