Have any of you guys ever been targeted by a DDOS attack?Alot of sites that ive been on, have got attacked recently and I was wondering what techniques you guys have used to avoid the affects of a DDOS attack. Please let me know, id appreciate it.
I used to be target of DDOS attacks in the past, but when you run your own VPS or dedicated service it's possible reinforce the security to prevent them or block them. Being actually hosted on shared hosting service, I did some background check to see if the service where I am has been victim of these attacks and also to know what they do about prevent them, and I have not had any issue with them, opposed to my early hosting years when I suffered such attacks.
Most people swear up and down about using CloudFlare to stop attacks, but I have had a bad experience with them, though maybe they have improved. They seem to be the go to company for thwarting this these days though. http://www.cloudflare.com/plans Here is their plans page
The site I am using has DDOS protection for all the packages. The company is called Snoork hosting and they ahve been pretty good thus far. I had two little attacks and there was zero down time during the event.
I'm curious to know how are they protecting your site against DDoS attacks. While I understand they are using a proxy to help filter, what's the actual technology behind it?
http://hosting.snoork.com/ddos-protection.php Some details are shown in the link above. I do not know how effective it would be.
Nope, not really since my sites/forums were never massively popular and no one had anything against them, I guess. But nonetheless, I used DDOS protection that came in with the hosting + domain package, just in case.
It's actually not that bad. I used to be a part of the scene [not anymore], and as you know these are the most vulnerable sites to DDoS. I would get hit daily. If your hosting is unmanaged, the best advice I have for you is Sentinel Firewall. [Link] Most managed hosting has very good staff support that will help you fend off attacks. Another good way is CloudFlare. This cloud network is great at automatically detecting and fighting off attacks. If it detects an attack CloudFlare routes the connections to it's own server.
There has been a lot of reports that CloudFlare is unable to sustain normal operations, let alone, operations under DDoS.
I forgot about this, Google is starting up a new project. Free DDoS protection. It's probably top notch too. https://projectshield.withgoogle.com/
I have found ClourdFlare more useless than helpful. It's not only unable to cope with a DDOS attack, but also tends to block legit traffic that it identifies as to come from "spammers" or blacklisted IPs when they don't. CloudFlare is however useful to lose clients if they find its annoying messages and unjustified blocking over and over in place.
I've never personally used CloudFlare but I've heard good things from people I know. You're probably right though. It wouldn't surprise me. I see a lot of websites with CloudFlare errors.