(May 9, 2015 08:31 AM)XPRMX Wrote: What about staminus? Ive heard about them being a good ddos protection service. if anything why not add load balancing servers? if you havnt already.
cant get more shit protection than staminus, js
DDOS Protection Changes |
|
cant get more shit protection than staminus, js 
May 9, 2015 10:05 AM
(This post was last modified: May 9, 2015 10:12 AM by Fudster.)
May I ask...Who is your Server ISP even? Like I have a OVH server, Been DDOSed plenty of times (probably small attacks compared to the attacks on here) But whenever there is a attack on my server OVH handles it.
Like so... ![[Image: WRERJzm.png]](https://i.imgur.com/WRERJzm.png) So basically I am asking if you host has any server level firewall setup, Not a software firewall but rather a hardware firewall. Wonder if it would help or not....CF + the firewall. * Fudster waits for Omni to reply back calling him a skid. (May 9, 2015 10:05 AM)Fudster Wrote: May I ask...Who is your Server ISP even? Like I have a OVH server, Been DDOSed plenty of times (probably small attacks compared to the attacks on here) But whenever there is a attack on my server OVH handles it. you blanked out the ip in the text down there, but you didn't block the title. You should fix that.
May 9, 2015 10:19 AM
(This post was last modified: May 9, 2015 10:20 AM by Fudster.)
(May 9, 2015 10:05 AM)Fudster Wrote: May I ask...Who is your Server ISP even? Like I have a OVH server, Been DDOSed plenty of times (probably small attacks compared to the attacks on here) But whenever there is a attack on my server OVH handles it. sir, there is a difference between layer-4 and layer-7 from what i know, hes using OVH :) the only layer-7 protected hosting that actually works must be CNServers.  (May 9, 2015 12:01 PM)'An0ny Wrote: sir, there is a difference between layer-4 and layer-7 Hes using limestonenetworks. Layer 4 isnt the problem here he just needs to get a decent firewall for layer 7 which omni has done.
Sadly I'm already seeing problems with Sucuri. Their API is crap. Their support is slow.
Quote:I assume you're not a litespeed fan. No, I'm not. Under another environment I might use it but pretty sure I need Apache. Nginx is by far the easiest to manage for an http reverse-proxy. Quote:Actually having nginx as the frontend would help a huge amount, you could block incorrect host records with ease, while using barely any resources. I should be able to do a lot of effective blocking at the Nginx level with minimal resources. Quote:You can do that with Apache too. Not true. Each Apache thread requires a ton more resources. Resources that choke the server with large attacks. Quote:He doesn't need your help nor did he ask for it. Pretty much. I'm not puzzled by what I need to do. I just need to do it. Find the time. Tear stuff apart. HF will likely experience some downtime. I already run Nginx on one server but likely I would go forward with my plan to do a complete backend change. That's a massive undertaking. We might even get rid of the CDN I use. Quote:if anything why not add load balancing servers With Nginx in front that's possible to do. But in-truth we don't need a load balancer. Quote:cant get more shit protection than staminus Briefly used them. They suck. They only care if you pay them $10k a month. Ridiculous. Quote:May I ask...Who is your Server ISP even? We're on LSN but it doesn't matter about which ISP it is. The attacks that are bypassing Cloudflare would probably get past the OVH protection scheme because it's Layer7. Quote:Hes using limestonenetworks. Layer 4 isnt the problem here he just needs to get a decent firewall for layer 7 which omni has done. Pretty much. And Cloudflare was doing great against Layer 7 attacks with IMUA mode but failed because of the CNAME bypass. That's the crux of the current problem. Thanks to everyone for their input but unless something changes or there is new information for me to report to members I'm going to close this. Thanks. |
|
|
