Breakdown of DDOS Attack Prevention

[!LoL]

Thanks for the information Omni, very helpfull indeed.

[codevade]

So you are saying a server would be better to custom tune your DDoS protection abilities. Otherwise you can get a vps and have the same tuning abilities correct or no?, Anyways on a shared host or vps would ddos deflate or a flood-stopping script not work to some extent?, I ask because you are talking about standard DDoS attacks in your main post and did not mention attacks such as http or sloworis and carefully crafted attacks that should be able to be stopped with scripts correct?

Anyways thanks for your helpful post above.

[0xE9]

So you are saying a server would be better to custom tune your DDoS protection abilities. Otherwise you can get a vps and have the same tuning abilities correct or no?, Anyways on a shared host or vps would ddos deflate or a flood-stopping script not work to some extent?, I ask because you are talking about standard DDoS attacks in your main post and did not mention attacks such as http or sloworis and carefully crafted attacks that should be able to be stopped with scripts correct?

Anyways thanks for your helpful post above.

DDoS deflate is useless in the majority of attacks. VPS lines generally range from 10 - 100mb/s So it's easy to overwhelm the connection. For serious DDoS Protection you want a dedicated server, A Hardware firewall and a KVM or some sort of other backup access. The general HTTP floods can be firewalled with a script but slowloris is slightly harder to detect a pattern with.

[codevade]

yes, but for regular UDP Attacks finding a host for shared hosting, Such as awknet have excellent protection for their shared hosting because they are selling spots on their dedicated server already configured to maximize DDoS protction.

And i realize DDoS deflate is not helpful with UDP or other types of attacks but if your host is not DDoS protected(shared host) Then that is all you have to work with that and this to stop rapid http server requests.
http://www.supportforums.net/showthread.php?tid=15062

anyways thanks for your response.

[0xE9]

yes, but for regular UDP Attacks finding a host for shared hosting, Such as awknet have excellent protection for their shared hosting because they are selling spots on their dedicated server already configured to maximize DDoS protction.

And i realize DDoS deflate is not helpful with UDP or other types of attacks but if your host is not DDoS protected(shared host) Then that is all you have to work with that and this to stop rapid http server requests.
http://www.supportforums.net/showthread.php?tid=15062

anyways thanks for your response.

It all depends on your site. Most sites don't have any problem with DDoS at all. But if you have a site which gets the same amount of DDoS as something like hackforums you won't last 2 mins on a shared host or vps.

[codevade]

yes, i understand that and i will be getting a dedicated server soon, Any tutorials on how to setup better ddos filtering firewalls or scripts?

[0xE9]

yes, i understand that and i will be getting a dedicated server soon, Any tutorials on how to setup better ddos filtering firewalls or scripts?

Well start with the basics like iptables. Also are you expecting much DDoS? Because if you are maybe ask the datacenter if they offer KVM's.

[codevade]

seems like ddos is a problem wherever ones goes. But at the same time it is always good to be prepared.

[PaperBag]

All three and I think that you've got some decent protection, although that a hardware firewall costs some money!

[LiamLC]

Thanks I've always wondered about this