Server + DDOS + SHIT Host = Cluster Fuck

[anantgupta]

Go with iweb.com . These people can provide you real DDos protection.

I guess only these people can help you out.

[Lifetalk]

Lots of stuff here you need to keep in mind.

1) Having a 1gigE port is not the solution. If the DDoS is killing your current server, it won't take much to fuck the 1gigE port either. You need real DDoS protection and mitigation.

2) Before I tell you about DDoS protection; yes and no, your KVM may or may not help. Depending on the DDoS, your server may or may not be reachable at all (via KVM or otherwise).

3) Real DDoS protection is not cheap. It's quite expensive. The offer posted by the now banned ProMovies was real. Here's a few places I know that offer real/solid DDoS protection:
http://www.blacklotus.net/
http://dragonara.net/dedicated-servers.html
http://www.serverorigin.com/ (this one I tried personally, quite effective but expensive too)

[EvilGenius]

LT & Sunhank008
Thank you for your very informative and valuable contributions.

I am planning on still using a reverse proxy, since that leaves me with room to have my www/data safe incase of a attack, I get emails from mysql and notify users even with a downed site, or bring it up elsewhere if needed.

So, Will a smaller server.. say a Dual Core/ Core2Duo be sufficient?

[bhanuprasad1981]

try contacting gigenet.com , also a suggestion you can even try litespeed web server instead of apache

hope i am helpful.

[EvilGenius]

bhan, the server under attack is a nginx rev. pxy

[Juicy]

reason why i suggested that company is because
of their 2Gbit connection & Their Firewall + they take care of DDOS attacks

Lmfao, 2gbit takes care of a ddos? Are you kidding me? I can push this power with 2 servers allready. A serious ddos (not some kid) will be at least 11 to 15 gbit. Ive seen alot bigger networks on the web. We've been attacked once by a guy with 2500+ server-class bots means all 100mbit and 1gbit.

[vgnheart]

Try following.

1) Get a 1gbps port
2) let nginx run on some good quadcore with enough ram
3) install a hardware firewall that gives throughput of 500mbps+

check if the attack is incoming flood with 100mbps+ b/w, then above steps can be good for u.if its like 2,3,..... gbits attack, u need a real ddos protection service as mentioned by others. but it gonna cost around 1500-3000$ for higher b/w attacks

[Smexy]

damn >< with the title. I thought this topic involves colonel cluster fuck ><

[damnyou]

Based on your facts, it seems like you are getting get/post flood. Before buying any reverse proxy protection, ask them do they provide you protection against the get/post flood.

[bhanuprasad1981]

bhan, the server under attack is a nginx rev. pxy

please check this :-

http://blog.litespeedtech.com/2011/01/05/litespeed-beats-nginx-apache-over-ddos-attack/

just get a free 2 cpu license which is valid for 14 days and have a try , if attack eases a bit you can try multi core license