Friday, June 1, 2018

centos - 100mb/s upgrade to 1gbps network - To Prevent DDOS




I have been under constant DDOS attack the last couple of weeks.



Now it seems my servers network is being flooded till it just doesn't have space anymore to receive and send normal packages.




I run CENTOS 5.6, and i have hardened SYSCTL and iptables to fight off SYN attacks as much as possible.



I have a 100Mbit network card and connection to my hosting company.



Normal incoming traffic is around 8mbit/s. Incoming data spikes go up to 100mbit when the attacks happen.



Could it help me fight off attacks if i were to upgrade my server to a 1GBPS network card + network connection?



I'm hoping the pipe doesn't flood so quickly when it's under attack.


Answer




You should be working with your hosting company to mitigate the attack.



They likely have other resources and means with which to deal with a DDOS attack. It is better handled at the network edge rather than the target.


No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...