Live data from Hacker News

DDoS protection

wiki.hetzner.de

51–60 of 175 posts

Re: DDoS protection

#52
post #19

Earlier quoted context omitted.

[disclaimer: I work for CF] CloudFlare also regularly speaks about attacks and mitigations, therefore is helping the community to build better defences. Other providers stay shy and never disclose their magic. We believe DDoS is an internet wide problem and one of the ways to solve it is to spread the mitigation know how. Examples: - DNS attacks https://www.youtube.com/watch?v=UcAygzNSxlI&t=2h13m20s - Iptables is gre…

Cloudflare gets so much undeserved hate on HN. You guys do amazing work, provide an incredible service and your writeups are awesome. Thank you.

I think their work is fantastic, but I really don't like that every site I visit meets me with CF's captcha page. It's not only annoying per se, but the privacy implications are unsettling. I welcome the competition.

Re: DDoS protection

#53
post #49
post #13

I'm from Germany but Online.net is the way better alternative to Hetzner for me. Server grade hardware, cheaper, no compromises, internal network, etc. etc. I think they even hired a lot new support people recently so you get an answer pretty fast. Hetzner always has this "cheap feeling" even though the hardware looks good on paper.

Looked pretty good untill I saw the €30/mo for windows licensing :( I pay €7,50 for the same windows license @ TransIP; wonder why there is such a big difference (Windows 2012 R2 Standard)

They allow you to install your own windows license to avoid that recurring license fee. We use a (non-public) server there for internal development and use an MSDN license on that. It involved a one time 25€ fee for their involvement in the setup process.

Re: DDoS protection

#54
post #19

Earlier quoted context omitted.

[disclaimer: I work for CF] CloudFlare also regularly speaks about attacks and mitigations, therefore is helping the community to build better defences. Other providers stay shy and never disclose their magic. We believe DDoS is an internet wide problem and one of the ways to solve it is to spread the mitigation know how. Examples: - DNS attacks https://www.youtube.com/watch?v=UcAygzNSxlI&t=2h13m20s - Iptables is gre…

Cloudflare gets so much undeserved hate on HN. You guys do amazing work, provide an incredible service and your writeups are awesome. Thank you.

Yeah, but they've also the "Wifi Captive Portal" of the internet, which frequently creates trouble (if you're using Tor for example).

Re: DDoS protection

#55

Can someone from the EU or DE talk about where Hetzner sits reputation-wise for those not familiar with them. Are they a solid provider?

We run a SaaS business there on ~25 servers with Hetzner. Besides small issues we are pretty happy. Feel free to email me if you want to know more details. Funnily I saw a thread on the customers forum at forum.hetzner.de today about why Hetzner does not have a better reputation social-media wise. Seems not to be on their priority list. There is even an English subforum, you may try to register there and ask for expe…

Social media is a wet rag in Germany: few companies see the point to invest with the relative low user engagement. It's typically seen as a distraction and/or too compromising on privacy.

There is also the 'German' view of customer service to consider (i.e. the customer is not always right).

Re: DDoS protection

#56

Can someone from the EU or DE talk about where Hetzner sits reputation-wise for those not familiar with them. Are they a solid provider?

Been running a single development server there for about 3 years, has been pretty solid.

Re: DDoS protection

#57

Can someone from the EU or DE talk about where Hetzner sits reputation-wise for those not familiar with them. Are they a solid provider?

Very solid and long-standing provider.

They target their offer a bit differently than other providers and this puts off some people, who don't appreciate the tradeoffs.

The details and tradeoffs are a bit too many to list here, but basically when they can cut corners to lower prices, while still keeping server-grade performance and uptime, they do not hesitate to do it.

It's also a bare metal / every server for itself / full DIY offering, without expensive gear such as SAN, blade servers and such. So if you're not prepared to roll your own virtualization, failover, backup, provisioning, etc solutions, you are better off going somewhere else.

That being said, the network service and server specs you get per your buck are second to none. The support is also adequate, if you understand the limitations of their offering.

Source: been a customer for 10+ years, currently have 10 servers with LXC and ZFS-on-Linux, hosting 100s of websites, mail domains, and custom applications, including a full backup solution based on ZFS send / recv. Would cost me a fortune on any other provider.

Re: DDoS protection

#58

Cloudflare is a major source of centralization. The more providers offer something like this, the merrier. I understand that this isn't a layer 7 solution, but that has it's downsides as well - Cloudflare (or any other reverse proxy) will MITM all your TLS traffic, for example. It's also time to address the elephant in the room: AWS. "Oops, you got DDOS'ed? Here, have a $50k invoice"

Calling this "the elephant in the room" is very insightful. It surprises me that AWS is so often recommended as the best choice for new businesses without large capital. AWS automatically scalable infrastructure changes DoS outcomes from 'your server is down due to DoS', to 'your company is out of business due to DoS' (and for small company it doesn't even need to be a large DDoS, shell script on a single machine with decent link can generate substantial AWS cost).

Re: DDoS protection

#59
post #13

I'm from Germany but Online.net is the way better alternative to Hetzner for me. Server grade hardware, cheaper, no compromises, internal network, etc. etc. I think they even hired a lot new support people recently so you get an answer pretty fast. Hetzner always has this "cheap feeling" even though the hardware looks good on paper.

I'd not seen the Scaleway hosting/VPS range before, so thanks for pointing to Online.net.

How does OVH compare to the above two?

Re: DDoS protection

#60

Can someone from the EU or DE talk about where Hetzner sits reputation-wise for those not familiar with them. Are they a solid provider?

Hetzner is solid but you have to understand what you're paying for, because that's what you'll get.

They'll answer competently. I sent a spam complain there once and got a sensible reply from the CEO.

But if you buy a product where they supply hardware and you do all the root work yourself, and then ask them to help you recover after a file system problem, they'll brush you off and you might consider their response rude.

Post reply on HN