Live data from Hacker News

Linode launches free DDoS protection

linode.com

171–180 of 182 posts

Re: Linode launches free DDoS protection

#171
post #156
post #68

I’ve been a Linode customer for at least a decade. Cheapest bandwidth I’ve been able to find anywhere and their data centers are super reliable.

Maybe because you only host static websites

I run https://jsonip.com on linode. I push about 5-6 terabytes of data outbound each month. Linode is a dream.

Re: Linode launches free DDoS protection

#172
post #66

Earlier quoted context omitted.

Perhaps you like problems? https://news.ycombinator.com/item?id=3654110 Compromised Linode, thousands of BitCoins stolen (2012) https://news.ycombinator.com/item?id=3655137 Linode Manager Security Incident (2012) https://news.ycombinator.com/item?id=5552756 Linode hacked, CCs and passwords leaked (2013) https://news.ycombinator.com/item?id=7086921 An old system and a SWAT team (2014) https://news.ycombinator.com/item…

Nobody's perfect, and Linode clearly had growing pains. Can you point to anything in the past four years? If not, I'd give them another chance.

Why would you “give a chance” to a commodity provider that had no differentiation but does have a bad history?

They’re not really cheaper, their hardware isn’t better, and they’ve shown a willingness to toss security out the window. Doesn’t strike me as deserving of “a chance”.

Re: Linode launches free DDoS protection

#173

Earlier quoted context omitted.

Nobody's perfect, and Linode clearly had growing pains. Can you point to anything in the past four years? If not, I'd give them another chance.

Why would you “give a chance” to a commodity provider that had no differentiation but does have a bad history? They’re not really cheaper, their hardware isn’t better, and they’ve shown a willingness to toss security out the window. Doesn’t strike me as deserving of “a chance”.

Because they're a small, bootstrapped company in a tough industry, and I figure I should treat them the way I'd want to be treated?

Re: Linode launches free DDoS protection

#174
post #108
post #106

Earlier quoted context omitted.

Yes, also perhaps some guidance figures on what the impact would have been had these measures not been in place.

Hard to answer the impact on your systems had we not stopped it... we don't know the full capability of your systems. Whether you can take a 10k packets per second ACK flood or a 1M pps ACK flood, or the 100M pps ACK flood depends on a lot of things we aren't privy to. What we can tell you is the frequency, size and nature of attacks that Cloudflare sees, and when we can clearly identify that an attack was unambiguou…

> If there were a global dashboard which was vague about the target and source, merely the frequency, size and nature... would that be valuable?

Yes.

> What we can tell you is the frequency, size and nature of attacks that Cloudflare sees, and when we can clearly identify that an attack was unambiguously targetting you specifically then we can tell only you about that too.

Yes.

Also, even if you could tell us WHAT kind of attack it was that would be helpful too.

Re: Linode launches free DDoS protection

#175
post #96

Well done Linode. I wonder how quickly DigitalOcean will add this to remain competitive. It's a huge win to have your hosting provider handle this and it's also nice to not be "forced" into using Cloudflare for such an important feature.

DigitalOcean has had free DDOS protection for quite awhile. And it sounds like Linodes solution is fairly similar. DigitalOcean decided to not advertise the fact because advertising your defenses is an open invitation to break them.

They still null route when the upstream links become congested but this is becoming less and less frequent as their network edge grows.

Re: Linode launches free DDoS protection

#176
post #4

Does AWS or any other large cloud provider offer this type of service?

Not sure if DigitalOcean falls under big providers, but they offer the same solution as Linode, but made a business decision to not advertise it. Even though they haven't advertised it the reduction of null routes and better customer experience has paid for the cost.

Re: Linode launches free DDoS protection

#177
post #148

Earlier quoted context omitted.

Heh, that reminds me of my first bank account. They told me I had something called "overdraft protection", which I stupidly assumed would protect me from overdrafting my account by declining transactions. Then I forgot to deposit a check at one point and overdrafted my account. I assumed things were fine because none of my transactions were getting declined. Instead I was being charged an extra $15 fee on every trans…

This is why the CEO of TCF Bank named his yacht Overdraft.

And here I am laughing at this pretty clever joke only to realize this is real..

https://www.washingtonpost.com/news/get-there/wp/2017/01/20/...

Re: Linode launches free DDoS protection

#178
post #51

Earlier quoted context omitted.

On my part, I prefer Linode now simply because I won't support a company as openly monopolistic as .. those guys .. if I can avoid it. Also, maybe a little superficial loyalty. Linode was the first provider I found with KVM support when it was a new feature in QEMU, but that reasoning is long expired.

Small thing perhaps but Linode offers new OS image so much faster than anyone else as I have seen them release CentOS 8 image pretty much on the day it was released and DO hadn't got it the last time I checked after a month or so. When a company has a room to care to the detail like this, you can feel they're not crushed by support requests which may mean they're doing things right.

This is because DO uses cloud images from upstream projects where possible. They weren't available for CentOS 8 until recently.

Re: Linode launches free DDoS protection

#179
post #96

Well done Linode. I wonder how quickly DigitalOcean will add this to remain competitive. It's a huge win to have your hosting provider handle this and it's also nice to not be "forced" into using Cloudflare for such an important feature.

DigitalOcean has had free DDOS protection for quite awhile. And it sounds like Linodes solution is fairly similar. DigitalOcean decided to not advertise the fact because advertising your defenses is an open invitation to break them. They still null route when the upstream links become congested but this is becoming less and less frequent as their network edge grows.

Do you have any documentation that mentions your droplets are protected from a ddos attack without you having to do anything?

Even DO themselves mention they don't protect against it and even go as far as saying to use Cloudflare.

Here's a tweet of that from Jan 2018: https://twitter.com/digitalocean/status/958364631671758854?l...

Is that them taking the "not advertising it" line to the next level by publicly stating they don't protect you even though they do? I'm a bit skeptical.

Post reply on HN