DDOS mitigation system / service ?

[Due]

I'm looking around to see what services / options is on the market, it needs to have a proven track of being able to handle 2+ Gbps / 1 million PPS attacks.

I'm using www.nationalnet.com and their hosting, they are handling this exceptionally well. Since we have hosting in multiple data centers I'm shopping around to see what options is out there for our other hosting needs (mainly EU based)

[Denny]

Bump for you.

[Due]

Originally Posted by Denny

Bump for you.

Thanks ! Guess this isn't a hot subject on GFY

[adultmobile]

In 2011 I had a DDOS from few million IP's on a site hosted in mojohost and they handled nicely, setup a (4? 16? forgot) gigabits firewall in front of my normal 1gigabit line server, however that was not meant to be a normal service they provide, I mean to host DDOS'd sites for a regular price. There's some companies who do it let you pay all the DDOS traffic so even if your server keeps up, it cost you quite for bandwidth (they use DNS to redirect the DDOS to their server then jumb back to your real server only what's good), mojohost at the time said if DDOS had to continue, we had to use service of those companies which with such DDOS traffic I had, would cost several $10,000's a month. I try to remember what these companies, one was dragonara.net , I went now and site not loads LOL I suppose a DDOS won against them. This one loads http://www.staminus.net/PROTECTED , I see 10 Gbps or 1,000,000 PPS DDoS Protection cost 2249/mo. I think you simply pay the bandwidth.

[2013]

Originally Posted by adultmobile

In 2011 I had a DDOS from few million IP's on a site hosted in mojohost and they handled nicely, setup a few bigabit's line firewall, however that was not meant to be a normal service they provide, I mean to host DDOS'd sites for a regular price, there's some companies who do it and they let you pay all the DDOS traffic so even if your server keeps up, it cost you quite for bandwidth.

do you know any hackers i can hit up

[RazorSharpe]

Originally Posted by Due

I'm looking around to see what services / options is on the market, it needs to have a proven track of being able to handle 2+ Gbps / 1 million PPS attacks.

I'm using www.nationalnet.com and their hosting, they are handling this exceptionally well. Since we have hosting in multiple data centers I'm shopping around to see what options is out there for our other hosting needs (mainly EU based)

Have a look at these guys:
http://www.incapsula.com/

[Babaganoosh]

http://www.rivalhost.com/ddos-protec...ed-servers.php

I moved a political website over there during election time. They were getting slammed with 210Kpps and something like 2 Gbps + and their old host was nullrouting them. Granted now they're paying big bucks for their hosting and nobody gives a shit about them anymore so they can probably move back to their old dedicated. Since they've been on rival, there hasn't been any downtime from a ddos.

[Due]

Originally Posted by adultmobile

In 2011 I had a DDOS from few million IP's on a site hosted in mojohost and they handled nicely, setup a (4? 16? forgot) gigabits firewall in front of my normal 1gigabit line server, however that was not meant to be a normal service they provide, I mean to host DDOS'd sites for a regular price. There's some companies who do it let you pay all the DDOS traffic so even if your server keeps up, it cost you quite for bandwidth (they use DNS to redirect the DDOS to their server then jumb back to your real server only what's good), mojohost at the time said if DDOS had to continue, we had to use service of those companies which with such DDOS traffic I had, would cost several $10,000's a month. I try to remember what these companies, one was dragonara.net , I went now and site not loads LOL I suppose a DDOS won against them. This one loads http://www.staminus.net/PROTECTED , I see 10 Gbps or 1,000,000 PPS DDoS Protection cost 2249/mo. I think you simply pay the bandwidth.

Thanks for the links, I will check them out

[Varius]

Prolexic is costly but deliver results. One of our sites last year received the 6th largest DDoS attack recorded and they did the job quite well (not perfect, and a lot of things were learnt trial-by-fire, but overall for the situation, quality job).

On the DNS-only DDoS protection, go with Neustar. Much more affordable but won't help of course if the attackers can reach you by IP directly. 95% of attacks, though, go through the hostnames.

(both of the above aren't hosts, they are simply 3rd-party services. Thus you can use whatever hosts you like).

[Due]

Originally Posted by RazorSharpe

Have a look at these guys:
http://www.incapsula.com/

Thanks I looked into them already, good to hear same names being mentioned multiple times.

Originally Posted by Babaganoosh

http://www.rivalhost.com/ddos-protec...ed-servers.php

I moved a political website over there during election time. They were getting slammed with 210Kpps and something like 2 Gbps + and their old host was nullrouting them. Granted now they're paying big bucks for their hosting and nobody gives a shit about them anymore so they can probably move back to their old dedicated. Since they've been on rival, there hasn't been any downtime from a ddos.

Thanks I looked on their site, I see they mention layer 7 protection, any idea if they handle layer 3 and layer 4 too ?

[Due]

Originally Posted by Varius

Prolexic is costly but deliver results. One of our sites last year received the 6th largest DDoS attack recorded and they did the job quite well (not perfect, and a lot of things were learnt trial-by-fire, but overall for the situation, quality job).

On the DNS-only DDoS protection, go with Neustar. Much more affordable but won't help of course if the attackers can reach you by IP directly. 95% of attacks, though, go through the hostnames.

(both of the above aren't hosts, they are simply 3rd-party services. Thus you can use whatever hosts you like).

Thanks I've been in touch with both, I dropped Prolexic due to their price but still have Neustar in front of me. They are my favorite for the moment and the pricing seems to be much more realistic

How is the network speed etc from Neustar ? My main concerns so far with these services have been that we spread our hosting into 3 different datacenters to lower load times, ping times and general redundancy.

[facialfreak]

Contact Jim (aka Cyberpunk) at deleskie |AT| gmail.com

Thank me later - buy me a beer.

[Varius]

Originally Posted by Due

Thanks I've been in touch with both, I dropped Prolexic due to their price but still have Neustar in front of me. They are my favorite for the moment and the pricing seems to be much more realistic

How is the network speed etc from Neustar ? My main concerns so far with these services have been that we spread our hosting into 3 different datacenters to lower load times, ping times and general redundancy.

They are extremely fast (many DCs) for USA and W.Europe. Funny enough, they aren't as great with Canada. They are not very quick from Central/South America or elsewhere if those are markets you target (in fact, typical DNS services at hosts like AWS are faster for those regions).

[cyberpunk]

Thanks FF, I don't get around here much anymore, 99.9 out of the business

We are building a DDoS solutions platform, after having run one the largets DDoS mitigation purpose built system in the world the last 5 years for my old employer. We unfortunately aren't ready for public release yet, but we've been talking to a couple of folks that run data centers that are here in GFY.

If you want some info on what your current options are fell free to ping me at the address FF listed.

-jim

Originally Posted by facialfreak

Contact Jim (aka Cyberpunk) at deleskie |AT| gmail.com

Thank me later - buy me a beer.

[RyuLion]

^^^^^^^^^^^^^