[Tutorial] Methods to protect against DDoS attacks
#6

Quote:
Originally Posted by rymax99
View Post
Tutorial is okay, gives basics, but there are tons of more things to do. For the most part, if all you have running on the box is a SA-MP server, all you have to worry about is making sure your host can handle layer 4 floods. However, if you run multiple services, you have to make sure for example a layer 7 flood against your web server isn't going to occupy all of your resources. This is where separating your services into different servers really comes into handy.

A proper setup to protect against DDoS attacks, and being able to identify attacks takes experience and tons of knowledge.
Most web applications have settings to provide basic over usage protection including CSF from floods so I don't know what you're going on about far as how a flood would take all your resources if your web server is on a resource limit as is.

But as said this is a game of bandwidth, just because you're hosted on different servers means that you're more protected. Long as something is available to public there will always be a way to overload it and it will become a game of bandwidth.

A proper setup would take time to learn yeah but I am not trying to show advanced ways, only basics but as stated long as you're under a large network with ddos protection all you really need is one server for everything and just use a dedicated IP for each service. It's a waste of money to use more than one server and waste of resources if you're already under a large protection network and have custom IPs for each service. And you could talk to the support and set up filters for each dedicated IP address which would fit each services special needs, making it just as equal to having a different server to host it far as protection goes. It might even be better because you can afford better protection and more resources.

By limiting access to each IP, talking to support for custom filters for each IP for each service such as explaining to them one is for the web another is for my game server, even make certain cores of CPU for each service to use and resources will never ever be a issue. This will allow you to use all your resources and have easier access to all systems and have easier monitoring of all systems, easier handling if set up right, save money, have more resources available to you and have the same protection and quality so I don't understand why you would separate each service onto different servers when it's quite pointless and a waste in about 99 percent of all cases long as you do as I said.

This is SA-MP if you're hosting only a few game servers and maybe a few websites there is no point in wasting money in more than one server when you could likely afford the protection needed for them and have a overall easier experience setting things up and set it up so that floods don't take your resources that you're so concerned about.
Reply


Messages In This Thread
Methods to protect against DDoS attacks for linux - by Jake187 - 18.05.2014, 22:51
Re: Methods to protect against DDoS attacks - by Dizz Nicca - 18.05.2014, 23:49
Re: Methods to protect against DDoS attacks - by Abagail - 19.05.2014, 00:23
Re: Methods to protect against DDoS attacks - by superrobot48 - 21.05.2014, 17:34
Re: Methods to protect against DDoS attacks - by rymax99 - 21.05.2014, 18:38
Re: Methods to protect against DDoS attacks - by Jake187 - 22.05.2014, 04:21
Re: Methods to protect against DDoS attacks - by Jankingston - 31.05.2014, 03:32
Re: Methods to protect against DDoS attacks - by iRaiDeN - 31.05.2014, 04:58
Re: Methods to protect against DDoS attacks - by Mauzen - 31.05.2014, 11:59

Forum Jump:


Users browsing this thread: 1 Guest(s)