DDOS protection?

[GoNz0]

I support a few hundred game servers hosted over a bank of dedicated server, We have moved Data center last year and since then DDOS attacks are becoming more frequent.

How do you protect against this as the new owner seems powerless to prevent these?

[Stoo]

http://thenextweb.com/media/2011/05/...nd-mitigation/

The only sure fire way is to throw money at it - either via distributed infrastructure, or specialist IPS hardware, or both, especially if it's a sustained hit.

[phil4]

I wouldn't mind also. Last time one of my servers was DDOSd it was like playing whack-a-mole. Luckily fore there weren't too many attackers, but still wasn't good.

So what did I do? Well my connection to the firewall and server was per the same connection as was being DDOSd, so my first step was to limit bandwidth so I could still connect. And then I started the whack-a-mole game.

[Stoo]

Although it sounds like you need a better dedicated hosting provider if they offer no solutions themselves..

[GoNz0]

tbh stoo I have turned round and pointed out the new DC are fu****g useless at this, telecity were never a problem. custodianDC have been ****e.

looks like we may be going to level3 again as we used those last time and they prevented any of this BS

it's angry children DDosing game servers via the new pay to dos system thats using bot nets.

amazed they keep spending the money to do it, saturating our 1gbs link earlier.

[Jay]

The easiest way is to block them at the edge firewall, sadly this normally means blocking blocks of IP ranges. Your provider really should be able to do this!

In the end I just used to block China and Russia IP ranges by default! It cut down on a lot of problems.