Question 160Gbps Massive DDOS

[tugapt]

Hi,

We've been suffering DDOS attacks and the last one peaked at 160Gbps. The attacker asked us 5k in btc, but we denied.
We moved to a different provider, but their DDOS protection only includes 10Gbps...
Does anyone have faced a similar problem? If so, how did you manage to solve it?
Do you know any good dedicated server provider for XC with strong DDOS protection?

 

[SpY]

Data packet Is a good one
I would also run cloudflare on your main server

 

[AndreV]

Hi,

We've been suffering DDOS attacks and the last one peaked at 160Gbps. The attacker asked us 5k in btc, but we denied.
We moved to a different provider, but their DDOS protection only includes 10Gbps...
Does anyone have faced a similar problem? If so, how did you manage to solve it?
Do you know any good dedicated server provider for XC with strong DDOS protection?

Hello, what kind of ddos L7 ?

I face ddos all the time, and with the CF Firewall i've manage to handle the attacks.

 

[redhat]

Content has been removed by @redhat

Your post is a surreptitious advertising!
If you want advice your services, you have to take a Ad-Package, like all other.

If you repeat, you get banned!

 

[tugapt]

Hello, what kind of ddos L7 ?

I face ddos all the time, and with the CF Firewall i've manage to handle the attacks.

Problem is that I'm using ports that cf cannot protect and it's difficult to change those ports with so many users already using them.

 

[AndreV]

Problem is that I'm using ports that cf cannot protect and it's difficult to change those ports with so many users already using them.

the ddos is at the main or the lb ?

 

[tugapt]

the ddos is at the main or the lb ?

Main.
As soon as I move it to a place without protection, a huge ddos starts. The bots are programmed to detect dns changes and attack the new destination.

 

[AndreV]

Main.
As soon as I move it to a place without protection, a huge ddos starts. The bots are programmed to detect dns changes and attack the new destination.

And you cant make a proxy rederection to another port that is supported by CF ?

 

[tugapt]

And you cant make a proxy rederection to another port that is supported by CF ?

As I understand it, to make a proxy redirection to CF, I need a proxy running on a server and the server will also be vulnerable to ddos, right?

 

[AndreV]

As I understand it, to make a proxy redirection to CF, I need a proxy running on a server and the server will also be vulnerable to ddos, right?

Right, if the attack is on your point of entry, yes.
what port do you use?

 

[tugapt]

I prefer not to expose it here, but it's not supported by CF. Mind if I ask why you're asking?

 

[AndreV]

I prefer not to expose it here, but it's not supported by CF. Mind if I ask why you're asking?

to make a test on CF page rule

 

[tugapt]

I do have CF enabled on other domains. If you share your thoughts with me, I can try to implement it.

 

[AndreV]

I do have CF enabled on other domains. If you share your thoughts with me, I can try to implement it.

i've made some tests and doesnt work, you've to make a choice between manual CF port change or Nginx proxy conf

 

[tugapt]

i've made some tests and doesnt work, you've to make a choice between manual CF port change or Nginx proxy conf

I tried something like that yesterday and always ended with the same problem: a ddos vulnerable point of entry. The only solution would be using CF with standard ports, like 80, 443, 8080, etc, but unfortunately this isn't an option for me at this time. Thanks anyways.

 

[elaygenov]

Your post is a surreptitious advertising!
If you want advice your services, you have to take a Ad-Package, like all other.

If you repeat, you get banned!

am so sorry redhat its was mistake from my side

 

[tugapt]

I managed to solve my problem using cosmicguard. They offer 1Tb+ DDOS protection and price is based on TX traffic, which is better for me since I don't have much traffic. Thanks everyone for the help.

 

[tugapt]

I managed to solve my problem using cosmicguard. They offer 1Tb+ DDOS protection and price is based on TX traffic, which is better for me since I don't have much traffic. Thanks everyone for the help.

Unfortunately, after 1 day of using cosmicguard I got hit by another massive DDOS (200Gbps+) and, apart from the obvious problem of having my server offline, cosmicguard charged me for 1.5TB DDOS traffic at $0.02 per Gb and I'd to kill their guardian process to stop the bleeding...
Not a good start for a service that looked promising. I've reported the problem and I'm waiting a reply.
PS: Please don't DM offering DDOS protection if you don't have a business and website active for some time already.

 

[Mardaki]

Unfortunately, after 1 day of using cosmicguard I got hit by another massive DDOS (200Gbps+) and, apart from the obvious problem of having my server offline, cosmicguard charged me for 1.5TB DDOS traffic at $0.02 per Gb and I'd to kill their guardian process to stop the bleeding...
Not a good start for a service that looked promising. I've reported the problem and I'm waiting a reply.
PS: Please don't DM offering DDOS protection if you don't have a business and website active for some time already.

You must asked them before you buy any service if they have any limitations on DDoS Protection.

We are company and registered also our job is to protect all our clients if your issue doesn't solve you can get full refund.

 

[tugapt]

You must asked them before you buy any service if they have any limitations on DDoS Protection.

We are company and registered also our job is to protect all our clients if your issue doesn't solve you can get full refund.

Hi,
I did ask them prior to host the site and they said they could offer 1TB+ DDOS protection, but they couldn't disclose the exact number.
Several days already passed and they didn't reply to the support ticket and the DDOS bandwidth is still listed on my account despite being told they'd remove it.
My conclusion is that cosmicguard isn't a reliable company.