DDoS protection and Web hosting

Thanks for your responses.

I agree that in some cases shutting down the target site is the only way to deal with a DDoS. And, I think it's completely reasonable that if we're on a hosted environment that the target site is shut down if it's interfering with the operation/availability of many other customers. This is why I'm hesitant to go back to a shared hosting plan. No matter how good the hosting company's DDoS protection is, there is always a chance they will have to shut us down. If we stay on a dedicated server, we lessen that risk (because a server only hosting our domain can take a much higher load).

My understanding is that software anti-DDoS methods are only marginally effective. Hardware anti-DDoS, rather, is much more effective, but that the efficacy is lessened if the hardware is not in front of individual servers (becuase to be effective it has to tailor itself to a site's speciffc traffic). What are your thoughts on this?

No idea why we are attacked. We are a small business-to-business publisher of catalogs. We did not receive any specific threats, so we don't know if it was random or targeted. It was quite a suprise actually.

-Christie

"And, I think it's completely reasonable that if we're on a hosted environment that the target site is shut down if it's interfering with the operation/availability of many other customers."

Agreed.  Once the situation gets to that point, the host has no option but to shut down the target site.  Otherwise, every site on that server will be effectively shut down anyway.  Also, I understand your preference for having a dedicated server.  There are a number of benefits that are well worth the additional cost if you are willing to pay it.

At the same time, there are always compromises.  In an ideal world, all of my sites would be located on their own dedicated server at Rackspace, but I can't afford it for my own sites and with regards to my clients, well . . . let's just say it would be a hard sell.  So, if money grew on trees, my advice to you would be to relocate to Rackspace where they have the best of many things including, it seems, DDoS protection.  But if you have only the one modest-sized site (as your question implies), I doubt that is a practical solution for you.  Take a look at what EV1 and thePlanet offer.  Don't forget ServerMatrix either, "a satellite of the planet" as they say, that offers 'entry level' servers.  Any choice you make, though, should factor in the results of a frank discussion with the host's customer service reps about DDoS protection, especially since you may remain a target.


"My understanding is that software anti-DDoS methods are only marginally effective. Hardware anti-DDoS, rather, is much more effective, but that the efficacy is lessened if the hardware is not in front of individual servers (becuase to be effective it has to tailor itself to a site's speciffc traffic). What are your thoughts on this?"

'Software' vs. 'Hardware' anti-DDoS is kind of a grey area, because as with firewalls, those terms are a bit fluid.  For example, what is a hardware firewall but a dedicated device running firewall software?  But you are absolutely correct that anti-DDoS software running on the server is much less effective as the deluge of traffic reaches the server before it is dealt with.  So, yes, absolutely, the protection must be placed in front of the server.


"No idea why we are attacked. We are a small business-to-business publisher of catalogs. We did not receive any specific threats, so we don't know if it was random or targeted. It was quite a suprise actually."

This is encouraging to some degree.  Let's hope it was a random event that won't be repeated.

>This is where you definitely want hardware & a great piece is about $40,000 - but it really does the job.

$40,000 for hardware ? phew! big boys toys ! must be fun working in such an environment :)

humeniuk > why does your Registration date show up as 01/12/2004, u have  been on here longer surely

mmm, nope - joined in Jan 2004 to ask a few question, started answering around June 2004.

doh! mm/dd/yyyy- why on earth is the date that way round :()

I prefer dd/mm/yy, too, but the different formats are used in the US & UK (I'm in Canada).

pbguy,

Just noticed this - "Honestly don't feel worthy posting on this topic under hum and the other real experts on the topic but ya never know when you might hit on something helpful."  Kind words, thank you - I feel the same way when coreybryant & periwinkle & others post :)  All any of us has to offer is our experience and our opinions.  Don't hesitate to post if you feel you have something to offer.

Sorry folks.  I made a mistake above, the recommendation has been updated as follows:

  Split: humeniuk {13229801} & coreybryant {13233663} & pbguy {13272874}

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

Humeniuk
EE Cleanup Volunteer

Hey humen, was just about to post that you forgot yerself in the split!  

p.s. thanks for the kind words, nice to know I'm not the only one who feels that way sometimes.  EE has always been a very welcoming place to share (and obtain) knowledge, it's why I contribute and try to help as much as I can when I have time to play.   Great job moderators and experts!  

 See ya around humen!