Live data from Hacker News

Linode launches free DDoS protection

linode.com

61–70 of 182 posts

Re: Linode launches free DDoS protection

#61

Congrats to them. Linode always has a special place in my heart.

Couple reasons for those less experienced with VPS?

Not GP but for me, Linode had been fine for 5+ years and it speaks but Vultr has been having choppy network at least once a month for few years now (detected by port monitoring) and that also speaks too.

DO has been good on me too.

Re: Linode launches free DDoS protection

#62
post #2

I guess this is basically the same as OVH's "VAC" system? I sometimes get these emails: >We have just detected an attack on IP address x.x.x.x. In order to protect your infrastructure, we vacuumed up your traffic onto our mitigation infrastructure. The entire attack will thus be filtered by our infrastructure, and only legitimate traffic will reach your servers. and then: >We are no longer able to detect any attack o…

I’m curious, does anyone know what that means specifically? How can they differentiate normal traffic from malicious traffic? What exactly triggers it? Is a ping flood with a slow (50mbits) internet connect enough? I am aware that the details are mostly likely private to protect them from abuse and are also a trade secret but I have a very hard time to find a general approach that might be similar to their solution?

I don't know their solution exactly, but what usually happens is they look for common packet signatures. Most DDOSes aren't very sophisticated, and can be blocked with fairly simple rules.

Re: Linode launches free DDoS protection

#63
post #2

I guess this is basically the same as OVH's "VAC" system? I sometimes get these emails: >We have just detected an attack on IP address x.x.x.x. In order to protect your infrastructure, we vacuumed up your traffic onto our mitigation infrastructure. The entire attack will thus be filtered by our infrastructure, and only legitimate traffic will reach your servers. and then: >We are no longer able to detect any attack o…

I’m curious, does anyone know what that means specifically? How can they differentiate normal traffic from malicious traffic? What exactly triggers it? Is a ping flood with a slow (50mbits) internet connect enough? I am aware that the details are mostly likely private to protect them from abuse and are also a trade secret but I have a very hard time to find a general approach that might be similar to their solution?

It's much more advanced than you think : custom asics etc...

Re: Linode launches free DDoS protection

#64
post #39
post #2

I guess this is basically the same as OVH's "VAC" system? I sometimes get these emails: >We have just detected an attack on IP address x.x.x.x. In order to protect your infrastructure, we vacuumed up your traffic onto our mitigation infrastructure. The entire attack will thus be filtered by our infrastructure, and only legitimate traffic will reach your servers. and then: >We are no longer able to detect any attack o…

They are very likely real and OVH has a very good system. You can thank them for making free DDoS protection mainstream, dragging all other hosts kicking and screaming into providing DDoS protection. In the past providers like Linode were happy to just null route your IP for several hours/days or charge you thousands to block a small flood.

It wasn't just Linode (a provider that's generally much cheaper than OVH), but high end providers like Softlayer too (and, as far as I know, still are)

Re: Linode launches free DDoS protection

#65
post #64
post #39

Earlier quoted context omitted.

They are very likely real and OVH has a very good system. You can thank them for making free DDoS protection mainstream, dragging all other hosts kicking and screaming into providing DDoS protection. In the past providers like Linode were happy to just null route your IP for several hours/days or charge you thousands to block a small flood.

It wasn't just Linode (a provider that's generally much cheaper than OVH), but high end providers like Softlayer too (and, as far as I know, still are)

How is Linode “much cheaper than OVH”? Their margins are probably way higher.

Re: Linode launches free DDoS protection

#66
post #10

Serious question: why would I want to use Linode over GCP or AWS? Asking as someone who hasn’t really dabbled with smaller cloud providers. Is it cost? Support? Developer tooling?

Perhaps you like problems?

https://news.ycombinator.com/item?id=3654110 Compromised Linode, thousands of BitCoins stolen (2012)

https://news.ycombinator.com/item?id=3655137 Linode Manager Security Incident (2012)

https://news.ycombinator.com/item?id=5552756 Linode hacked, CCs and passwords leaked (2013)

https://news.ycombinator.com/item?id=7086921 An old system and a SWAT team (2014)

https://news.ycombinator.com/item?id=10825425 Linode DDoS continues – Atlanta down for 16+ hours (2016)

https://news.ycombinator.com/item?id=10998661 The Twelve Days of Crisis – A Retrospective on Linode’s Holiday DDoS Attacks (2016)

https://news.ycombinator.com/item?id=10845170 Security Notification and Linode Manager Password Reset (2016)

https://news.ycombinator.com/item?id=10806686 Linode is suffering on-going DDoS attacks (2016)

> why would I want to use Linode over GCP or AWS?

If you include dedi providers like OVH into this comparison, you probably just wouldn’t.

Re: Linode launches free DDoS protection

#67
post #43

Nice. Apart from the security incident that took place long time ago, are there any reason why everyone is going straight to DO instead of Linode? For a long time Linode has had better features, performance and bandwidth. It wasn't until recently DO had Managed DB and many other additions. Linode's High Memory Plan also has much better Memory : CPU Ratio. Still waiting for their CDN, ( Not sure why they are not expos…

> Apart from the security incident that took place long time ago, are there any reason why everyone is going straight to DO instead of Linode?

Which one? I count at least 4 off the top of my head.

And the problem wasn’t just those security incidents, it was Linode lying and covering them up.

Re: Linode launches free DDoS protection

#69
post #68

I’ve been a Linode customer for at least a decade. Cheapest bandwidth I’ve been able to find anywhere and their data centers are super reliable.

> Cheapest bandwidth I’ve been able to find anywhere

Have you looked? Linode BW is incredibly expensive compared to just about any dedi provider.

Re: Linode launches free DDoS protection

#70
post #43

Nice. Apart from the security incident that took place long time ago, are there any reason why everyone is going straight to DO instead of Linode? For a long time Linode has had better features, performance and bandwidth. It wasn't until recently DO had Managed DB and many other additions. Linode's High Memory Plan also has much better Memory : CPU Ratio. Still waiting for their CDN, ( Not sure why they are not expos…

Better marketing from DO. There strategy of content marketing with how-to guides has been massively successful. Personally, think DO has a more pleasant UX too.

DO has been posting (or rather, spamming IMHO) /r/golang with fluff like "how to use switch statement in Go". You know, the sort of articles that someone who learned Go a week ago can write.
Post reply on HN