Precautions to stop DDOS attacks

[Tulip]

I know that you need to pay a lot for good protection, but I know there's certain precautions people can take.

I already know of the following:
- Blocking all unused ports
- Hosting the game server on an alternate IP

What else can be done?

 

[BlueSoaptTurtle]

Setup bungeecord on a vps with strong ddos protection, then on your main server, set firewall to only allow connections from the bungeecord IP and port, that way you'll be pretty safe

 

[Tulip]

Setup bungeecord on a vps with strong ddos protection, then on your main server, set firewall to only allow connections from the bungeecord IP and port, that way you'll be pretty safe

Know of anything with good DDOS protection?

 

[BlueSoaptTurtle]

ovh, staminus, intreppid I think....[DOUBLEPOST=1458041817][/DOUBLEPOST]Can only vouch for ovh, haven't used the other ones.

 

[Tulip]

ovh, staminus, intreppid I think....[DOUBLEPOST=1458041817][/DOUBLEPOST]Can only vouch for ovh, haven't used the other ones.

for some reason my kimsufi server can only handle about 200mbps...

 

[BlueSoaptTurtle]

for some reason my kimsufi server can only handle about 200mbps...

Kimsufi doesn't have any anti ddos, SoYouStart have ddos mitigation but only kick in once an attack is detected, OVH's main servers/vps's can have permanent mitigation which isn't needed, you could even get a regular shared host to put bungeecord on

 

[Renovix]

OVH's performance is going down the drain... I'd look at the reputable hosts on MCM - many of them have protection against attacks.

 

[Renovix]

Many of them are shutting down due to lack of funds too......

There are quite a few hosts right now that are doing really well, take Host-Atom for example.

 

[Renovix]

In my heart, OVH will be the king in Dedis

Have you seen how bad OVH's performance has been for the past 4 or so months? I was staff on a server back in 2015 and it was hosted by OVH.... near the end of the year, our forums and server went down three times in the span of four weeks.

 

[Tulip]

Honestly, I think it should be fine. According to the support rep, it was a UDP flood, which meant it was attacking random ports. I have blocked all ports on my dedi from 23-25564, so that should stop a lot of the attacks.

 

[Renovix]

Host-atom uses OVH.

Welp, I feel stupid now...