DDoS Protection • Hacker News Board

Re: DDoS Protection

#11

Post by andersa » Sat, Jun 10, 2023, 2:50 PM UTC

whitepoplar wrote: post #7

janejeon wrote: post #6

At the risk of sounding like the "why do you need DropBox if you have rsync herr derr" guy, why... do I need DDoS protection from my VPS provider if I have Cloudflare anyway?

Isn't it trivial to discover the origin IP and then just hit it directly?

If you set it up correctly, it's not possible.

Re: DDoS Protection

#12

Post by andersa » Sat, Jun 10, 2023, 2:50 PM UTC

janejeon wrote: post #6

At the risk of sounding like the "why do you need DropBox if you have rsync herr derr" guy, why... do I need DDoS protection from my VPS provider if I have Cloudflare anyway?

What if you want to run a service that can't go behind Cloudflare (such as a game server)?

Re: DDoS Protection

#13

Post by capableweb » Sat, Jun 10, 2023, 2:52 PM UTC

janejeon wrote: post #6

At the risk of sounding like the "why do you need DropBox if you have rsync herr derr" guy, why... do I need DDoS protection from my VPS provider if I have Cloudflare anyway?

Why do you need DDoS protection from Cloudflare if your VPS provider has it anyway?

Some people prefer all-in-one solutions, otherwise things like AWS wouldn't exists. Others prefer to spread out their eggs. One is not absolutely right and the other absolute wrong.

Re: DDoS Protection

#14

Post by berkle4455 » Sat, Jun 10, 2023, 2:52 PM UTC

whitepoplar wrote: post #7

janejeon wrote: post #6

At the risk of sounding like the "why do you need DropBox if you have rsync herr derr" guy, why... do I need DDoS protection from my VPS provider if I have Cloudflare anyway?

Isn't it trivial to discover the origin IP and then just hit it directly?

you deny all, accept to the machines actually serving content.

Re: DDoS Protection

#15

Post by bombcar » Sat, Jun 10, 2023, 2:53 PM UTC

revskill wrote: post #10

One question, what's current best practice for DDOS prevention on my own VPS Ubuntu box ?

Don’t get DDoS’d or use a provider that has built-in DDoS protection.

Depending on what you’re using it for you could “cloak” it.

Re: DDoS Protection

#16

Post by stavros » Sat, Jun 10, 2023, 2:53 PM UTC

whitepoplar wrote: post #7

janejeon wrote: post #6

At the risk of sounding like the "why do you need DropBox if you have rsync herr derr" guy, why... do I need DDoS protection from my VPS provider if I have Cloudflare anyway?

Isn't it trivial to discover the origin IP and then just hit it directly?

How would you?

Re: DDoS Protection

#17

Post by capableweb » Sat, Jun 10, 2023, 2:53 PM UTC

re-thc wrote: post #3

skilled wrote: post #2

I’m going to bite and ask myself, Do you only have to pay if you have been exposed to an attack?

> Do you only have to pay if you have been exposed to an attack? It's like insurance. Do you buy it after an accident or before?

Can I purchase insurance while I'm crashing? Sounds like getting insurance and getting DDoS protection isn't really the same thing after all...

Re: DDoS Protection

#18

Post by Sebguer » Sat, Jun 10, 2023, 2:53 PM UTC

andersa wrote: post #11

whitepoplar wrote: post #7

Earlier quoted context omitted.

Isn't it trivial to discover the origin IP and then just hit it directly?

If you set it up correctly, it's not possible.

Depends on the usecase, and whether you're shelling out the huge sums for Cloudflare Enterprise. Don't think there's too many cheap options for obfuscation if e.g. you're hosting a game server, which also happens to be one of the most common DDoS targets.

Re: DDoS Protection

#19

Post by revskill » Sat, Jun 10, 2023, 2:53 PM UTC

bombcar wrote: post #15

revskill wrote: post #10

One question, what's current best practice for DDOS prevention on my own VPS Ubuntu box ?

Don’t get DDoS’d or use a provider that has built-in DDoS protection. Depending on what you’re using it for you could “cloak” it.

What if the situation is the provider doesn't have built-in DDos protection ?

Re: DDoS Protection

#20

Post by jonathantf2 » Sat, Jun 10, 2023, 2:55 PM UTC

janejeon wrote: post #6

At the risk of sounding like the "why do you need DropBox if you have rsync herr derr" guy, why... do I need DDoS protection from my VPS provider if I have Cloudflare anyway?

Cloudflare doesn't proxy all applications, just HTTPS.