Linode launches free DDoS protection

#1

Post by hanru » Sat, Jan 25, 2020, 3:10 AM UTC

Linode launches free DDoS protection
linode.com

Re: Linode launches free DDoS protection

#2

Post by regecks » Sat, Jan 25, 2020, 3:33 AM UTC

I guess this is basically the same as OVH's "VAC" system? I sometimes get these emails:

>We have just detected an attack on IP address x.x.x.x. In order to protect your infrastructure, we vacuumed up your traffic onto our mitigation infrastructure. The entire attack will thus be filtered by our infrastructure, and only legitimate traffic will reach your servers.

and then:

>We are no longer able to detect any attack on IP address x.x.x.x. Your infrastructure has now been withdrawn from our mitigation system.

I never need to do anything, but I don't think these attacks are real anyway.

Re: Linode launches free DDoS protection

#3

Post by tomrod » Sat, Jan 25, 2020, 3:34 AM UTC

Fascinating! I learned about fail2ban this week as well as how to search for bad SSH actors -- I was amazed at the traffic requests my Linode was getting decked with.

Having this as a default seems good.

Re: Linode launches free DDoS protection

#4

Post by arrty88 » Sat, Jan 25, 2020, 3:40 AM UTC

Does AWS or any other large cloud provider offer this type of service?

Re: Linode launches free DDoS protection

#5

Post by RL_Quine » Sat, Jan 25, 2020, 3:41 AM UTC

tomrod wrote: post #3

Fascinating! I learned about fail2ban this week as well as how to search for bad SSH actors -- I was amazed at the traffic requests my Linode was getting decked with. Having this as a default seems good.

Spurious SSH traffic is not a DOS, and isn’t the sort of attack this is talking about, rather volumetric floods and things of that matter.

Re: Linode launches free DDoS protection

#6

Post by nerdbaggy » Sat, Jan 25, 2020, 3:42 AM UTC

Congrats to them. Linode always has a special place in my heart.

Re: Linode launches free DDoS protection

#7

Post by RL_Quine » Sat, Jan 25, 2020, 3:42 AM UTC

arrty88 wrote: post #4

Does AWS or any other large cloud provider offer this type of service?

AWS has strong DOS protection and just doesn’t tend to shout about it. Putting services behind AWS for some basically free protection has been a trick against basic volumetric attacks for a while.

Re: Linode launches free DDoS protection

#8

Post by nerdbaggy » Sat, Jan 25, 2020, 3:47 AM UTC

arrty88 wrote: post #4

Does AWS or any other large cloud provider offer this type of service?

When using services where the IP is shared by multiple users they really have to have good protection. They can’t nullroute all the tenants

Re: Linode launches free DDoS protection

#9

Post by pm90 » Sat, Jan 25, 2020, 3:47 AM UTC

arrty88 wrote: post #4

Does AWS or any other large cloud provider offer this type of service?

I don’t believe GCP has such a service explicitly, although in 2 years of using them I’ve never seen any DDoS like behavior despite having multiple public endpoints. I am assuming there is some kind of automatic remediation that happens, or else I’ve just been extremely lucky.

Re: Linode launches free DDoS protection

#10

Post by pm90 » Sat, Jan 25, 2020, 3:50 AM UTC

Serious question: why would I want to use Linode over GCP or AWS? Asking as someone who hasn’t really dabbled with smaller cloud providers. Is it cost? Support? Developer tooling?