How to stop a DDoS attack • Hacker News Board

Re: How to stop a DDoS attack

#11

Post by nullrouted » Tue, Dec 08, 2015, 9:31 PM UTC

vox_mollis wrote: post #10

prdonahue wrote: post #5

Earlier quoted context omitted.

How do you define "extremely expensive"? CloudFlare's Business Plan ($200/mo) includes advanced DDoS mitigation: https://www.cloudflare.com/ddos/ . Also, due to caching of assets in PoPs close to end-users (and TLS termination at the edge), the site is often much faster than without DDoS protection.

How do you define "extremely expensive"? Always-on scrubbing will typically run you $10k provisioning and $6-9k monthly for 100mbps of clean bandwidth from most of the providers.

Always on scrubbing has a number of factors depending on the provider you use. All charge for clean traffic but some charge for number of netblocks/ASNs, number of routers, number of attacks mitigated, etc. It can get extremely expensive depending on your traffic needs and all the other variables. Paying an extra $250,000+ year for 2 Gb/s of traffic is extremely expensive to me.

Re: How to stop a DDoS attack

#12

Post by tracker1 » Tue, Dec 08, 2015, 9:33 PM UTC

Cool article... how about "Dead or Alive" bounties for the people responsible? I'm only half joking, but given the distribution of the people responsible, and how much like the "old west" attacks on the internet today seem to resemble, not sure how bad of a solution it would actually be.

Re: How to stop a DDoS attack

#13

Post by dimgl » Tue, Dec 08, 2015, 9:42 PM UTC

The irony is that this website seems to be down right now.

http://downforeveryoneorjustme.com/blog.fastmail.com/2015/12...

Not sure if it's due to DDOS, but it's definitely not working on my end.

Re: How to stop a DDoS attack

#14

Post by mbrd » Tue, Dec 08, 2015, 9:49 PM UTC

dimgl wrote: post #13

The irony is that this website seems to be down right now. http://downforeveryoneorjustme.com/blog.fastmail.com/2015/12... Not sure if it's due to DDOS, but it's definitely not working on my end.

My Fastmail web access is currently taking 60+ seconds to load. The DDOS in the blog was last month so I'm not sure if it's related.

Re: How to stop a DDoS attack

#15

Post by asherkin » Tue, Dec 08, 2015, 9:58 PM UTC

pki wrote: post #8

DanBlake wrote: post #3

A article I wrote on attempting to do this yourself (without cloudflare/other services) is here: http://harknesslabs.com/post/38104429912/fighting-spoofed-sy... Its much easier to use cloudflare, but sometimes it just not possible to use them (it wasnt for us, due to needing hardcoded IPs in our DC)

Cloudflare lets you announce your own IP space through their serivce on non-personal plans don't they?

You need an Enterprise plan for that unfortunately, it's not even included in Business.

Re: How to stop a DDoS attack

#16

Post by elwell » Tue, Dec 08, 2015, 10:13 PM UTC

dimgl wrote: post #13

The irony is that this website seems to be down right now. http://downforeveryoneorjustme.com/blog.fastmail.com/2015/12... Not sure if it's due to DDOS, but it's definitely not working on my end.

Posting a blog post with the title "How to stop a DDoS attack" unfortunately will invite the trolls.

Re: How to stop a DDoS attack

#17

Post by alfiedotwtf » Tue, Dec 08, 2015, 10:19 PM UTC

dimgl wrote: post #13

The irony is that this website seems to be down right now. http://downforeveryoneorjustme.com/blog.fastmail.com/2015/12... Not sure if it's due to DDOS, but it's definitely not working on my end.

It's intermittent. Currently works fine for me though:

http://www.fastmailstatus.com/

Re: How to stop a DDoS attack

#18

Post by robn_fastmail » Tue, Dec 08, 2015, 10:49 PM UTC

dimgl wrote: post #13

The irony is that this website seems to be down right now. http://downforeveryoneorjustme.com/blog.fastmail.com/2015/12... Not sure if it's due to DDOS, but it's definitely not working on my end.

Datacentre confirmed a DDoS attack, which took a little while to mitigate. We're looking good now, but we're continuing to monitor.

Re: How to stop a DDoS attack

#19

Post by robn_fastmail » Tue, Dec 08, 2015, 10:50 PM UTC

elwell wrote: post #16

dimgl wrote: post #13

The irony is that this website seems to be down right now. http://downforeveryoneorjustme.com/blog.fastmail.com/2015/12... Not sure if it's due to DDOS, but it's definitely not working on my end.

Posting a blog post with the title "How to stop a DDoS attack" unfortunately will invite the trolls.

Quite. As my dear colleague said this morning, "hubris" is the word of the day. Still, I'm not sorry we posted it.

Re: How to stop a DDoS attack

#20

Post by gist » Tue, Dec 08, 2015, 10:58 PM UTC

robn_fastmail wrote: post #19

elwell wrote: post #16

Earlier quoted context omitted.

Posting a blog post with the title "How to stop a DDoS attack" unfortunately will invite the trolls.

Quite. As my dear colleague said this morning, "hubris" is the word of the day. Still, I'm not sorry we posted it.

I would honestly like to know the upside to posting vs. the downside. I think there is also a saying for this, something like "don't spit into the wind".