1
Getting DDoS'd with DDoS Protection?
Since about the first week of starting a dedicated server, a person has maliciously been attacking my server with multiple IP addresses on a daily basis. Due to this harassment, I was forced to purchase DDoS protection from the dedicated server supplier, and change the IP of the server which solved the DDoS'ing for about 2 weeks but it has suddenly started happening again.
This is obviously bad for the player base of the server, and is extremely agitating, does anyone know what else I can do to try and keep my server alive and stop these obnoxious people?
This is obviously bad for the player base of the server, and is extremely agitating, does anyone know what else I can do to try and keep my server alive and stop these obnoxious people?
8
I've experienced DDoS attacks in the past where some traffic gets through. It's to do with BGP routing and where the attacks are coming from.
My server is in Australia, and we have DDoS protection via BlackLotus. Any traffic coming from the USA is routed via BlackLotus and they will scrub out the DDoS traffic and only let legit traffic through. During one particularly large attack (4Gb/s) some 60Mb/s was still hitting my server - that that was all DDoS traffic from within Australia - it wasn't filtered by BlackLotus because the advertised route for Australian traffic was not to go through BlackLotus.
The traffic originating from within Australia was not routed via BlackLotus, as that would add additional latency to my Australian players (their packets would have gone via the USA and then back again - which is undesired).
After this attack my provider engaged a local DDoS filtering service and so now they now do go through a local filter service - and the traffic from the USA goes through the USA based BlackLotus service.
So - it's quite possible a DDoS attack can occur even if your provider claims to have DDoS protection. There are just varying degrees of DDoS protection.
You can't directly get DDoS protection via the BGP routing method unless you fulfill requirements such as having an AS number - and to get one of those you pretty much need to be an ISP. If you want DDoS protection the only way to go is to use a host which has the ability to BGP route and they use scrubbing services such as BlackLotus, Prolexic, etc. You need to stop the traffic BEFORE it gets to your server - there is no other way to stop large DDoS attacks. I don't care how powerful your router is or how fancy your iptables are - if you have a 1Gb/s link then someone sending you 4Gb/s of traffic will render your server useless. You MUST get the traffic filtered upstream.
My server is in Australia, and we have DDoS protection via BlackLotus. Any traffic coming from the USA is routed via BlackLotus and they will scrub out the DDoS traffic and only let legit traffic through. During one particularly large attack (4Gb/s) some 60Mb/s was still hitting my server - that that was all DDoS traffic from within Australia - it wasn't filtered by BlackLotus because the advertised route for Australian traffic was not to go through BlackLotus.
The traffic originating from within Australia was not routed via BlackLotus, as that would add additional latency to my Australian players (their packets would have gone via the USA and then back again - which is undesired).
After this attack my provider engaged a local DDoS filtering service and so now they now do go through a local filter service - and the traffic from the USA goes through the USA based BlackLotus service.
So - it's quite possible a DDoS attack can occur even if your provider claims to have DDoS protection. There are just varying degrees of DDoS protection.
You can't directly get DDoS protection via the BGP routing method unless you fulfill requirements such as having an AS number - and to get one of those you pretty much need to be an ISP. If you want DDoS protection the only way to go is to use a host which has the ability to BGP route and they use scrubbing services such as BlackLotus, Prolexic, etc. You need to stop the traffic BEFORE it gets to your server - there is no other way to stop large DDoS attacks. I don't care how powerful your router is or how fancy your iptables are - if you have a 1Gb/s link then someone sending you 4Gb/s of traffic will render your server useless. You MUST get the traffic filtered upstream.
They might be using a strong botnet that's bypassing the DDoS protection. You best bet is to contact the host or move to another host.
endurethecraftShirotsuchiSince about the first week of starting a dedicated server, a person has maliciously been attacking my server with multiple IP addresses on a daily basis. Due to this harassment, I was forced to purchase DDoS protection from the dedicated server supplier, and change the IP of the server which solved the DDoS'ing for about 2 weeks but it has suddenly started happening again.
This is obviously bad for the player base of the server, and is extremely agitating, does anyone know what else I can do to try and keep my server alive and stop these obnoxious people?
I'll be very surprised if somebody DDos attacked you.. more likely that you installed an intense plugin and brought the server to a halt or you tried to delete 600000 blocks with worldedit at a time..
I can assure you that it was not a plugin being uploaded, nor was it World Edit or anything of the sort. As I said earlier, some very obnoxious person/people have been specifically targeting my server, for unknown reasons.
Is there anyone that knows any way to prevent DDoSers from attacking your server when they use a IP proxy?
ShirotsuchiSince about the first week of starting a dedicated server, a person has maliciously been attacking my server with multiple IP addresses on a daily basis. Due to this harassment, I was forced to purchase DDoS protection from the dedicated server supplier, and change the IP of the server which solved the DDoS'ing for about 2 weeks but it has suddenly started happening again.
This is obviously bad for the player base of the server, and is extremely agitating, does anyone know what else I can do to try and keep my server alive and stop these obnoxious people?
I'll be very surprised if somebody DDos attacked you.. more likely that you installed an intense plugin and brought the server to a halt or you tried to delete 600000 blocks with worldedit at a time..
A lot of server providers with ddos protection are easily cracked especially the well known hosts because they don't care about the server quality. They just care about money. Try contacting the hosting company and maybe consider changing hosts.
Yeah, as this has happened a few times I am not very happy with the supplier, and will be looking around to see if I can find another good host.
Your host most likely doesnt offer the ddos protection you need... Alot of hosts throw around ddos protection but to be fair majority doesnt work well. Unless its a dedicated ddos protection and not some shared nonsense most hosts do, youre pretty much stuck
did the DDoS protection disable itself?
I am no geek to this sort of thing, but maybe it's valid.
I am no geek to this sort of thing, but maybe it's valid.
