Linked Questions

1
vote
2answers
2k views

Using Free/Open BSD + pf as a DDoS filter [duplicate]

Is using Free/Open BSD + pf a workable option for filtering DDoS? Which of the two would perform better under heavy load? (SYN flood maxing a 1 gbit pipe) Is this even an option to consider, or is a ...
1
vote
2answers
2k views

httpd high cpu usage slowing down server response [duplicate]

my client has a image sharing website with about 100.000 visitor per day it has been slowed down considerably since this morning when i checked processes i've notice high cpu usage from http .... ...
3
votes
3answers
425 views

Anti-DDoS Question [duplicate]

Our company´s main owner (telecon group) wants us to deploy anti-DDoS mechanisms, such as Arbor Pravail, which is a great idea. Although... I have a question... If our main ISP Backbone provider have ...
3
votes
2answers
134 views

In what way am I more likely to be DDoS'd? Via http or other ports? [duplicate]

I am writing a web service that has a lot of vicious competitors. Vicious as in: people have been getting DDoS'd within hours of setting up shop in this arena. The service will consist of: a ...
1
vote
3answers
943 views

ESXi server under DoS attack, can I use SSH to determine where from? [duplicate]

My VMWare ESXi 4 server appears to be under a Denial of Service attack. I am getting massive packet loss to the server (60+%) and am barely able to load any services on the VMs running on the host. I ...
0
votes
2answers
1k views

Am I under DDOS? [duplicate]

I have a mail server, Debian Linux 2.4.31, which is dropping TCP connections and basically being unavailable. I have iptables running on it and its pretty much very restrictive. When I run "netstat ...
0
votes
1answer
2k views

DDOS Mitigation for UDP Flood [duplicate]

We are currently under attack on one of our servers at a datacenter in Chicago. 1 gbps (peak) 600mbps average UDP flood port 80 (incoming) Consumed 20 TB bandwidth in 2.5 days We have 50TB of ...
4
votes
3answers
389 views

I know how to scale my software, but how to prevent downtime because of network outages? [duplicate]

We are running rather large LAMP sites which scale well software wise. We use redundant load balancers in front of a bunch of webservers using MySQL via a proxy in master-slave-slave-slave. We are ...
2
votes
3answers
597 views

ddos protection for dedicated server [duplicate]

Whats the best way to protect a linux root server from a ddos attack? I just want to inform myself about the issue. I'm wondering I haven't found a good solution. anybody has one? thanks!
2
votes
1answer
1k views

How do I drop “empty” HTTP packets using iptables? [duplicate]

I have a 1GB-VPS-hosted site running on Ubuntu 10.04 LTS. I am using nginx as the web server. The site has been running in a relatively stable configuration for three years, and handles about 4 ...
4
votes
2answers
1k views

DDoS and Heroku [duplicate]

I use Heroku as my hosting solution. So, if some bad man attacks my site with DDoS, what should I do?
0
votes
1answer
1k views

Best Practice for captcha based protection against D.O.S to Nginx Proxy [duplicate]

The idea is explained here In simple words, Nginx Proxy plays the role of load balance and transmits the HTTP/HTTPS requests to servers. If the number of request times within a certain period from ...
0
votes
3answers
868 views

iptables rule to stop DDOS [duplicate]

My server is undergoing a ddos attack with the traffic in my apache logs appearing like: ip address - - [11/Apr/2013:01:01:04 -0600] "POST / HTTP/1.1" 416 31 "-" "Microsoft Internet Explorer" ip ...
0
votes
1answer
850 views

Multiple DDOS attacks per day [duplicate]

I run a popular tech website, and for weeks my site has been under DDOS attacks. The attacks happen at random times, and often about 10 times per day. Usually the attacks only last a few minutes, then ...
0
votes
2answers
1k views

Is Apache mod_evasive has same function as Lighttpd mod_evasive? [duplicate]

Apache mod_evasive description: When possible attacks are detected, mod_evasive will block the traffic from the source for a specific duration of time, while reports abuses via email and syslog ...

15 30 50 per page