Sup.
So I want to tell you guys how you can protect your servers (doesn't have to be specifically Minecraft) from DDoS attacks. I don't play Minecraft so don't ask me to come on your server and start assisting you with random shit.
To start with I will explain what a DDoS attack is, DDoS (distributed denial of service) is literally what it says in the name, denial of service. The most common attacks are usually just traffic attacks (high amounts of traffic) flooding a network causing legitimate traffic to usually get dropped resulting in the service not being available to legit players/customers (if you're running some kind of online shop).
To protect your game server you can go with any host you want, go with a cheap host that provide a good amount of RAM, and a good CPU. I know people will say this is a stupid idea because it probably won't have DDoS protection but just continue reading and you will realize why I would set everything up this way. I'll explain... The reason I would purchased a system without DDoS protection is because I am going to be purchasing a cheap VPS that provides DDoS protection and be setting up a GRE (or ipip) tunnel. Most kernels will support GRE tunnel (ip_gre kernel mod). I know some VPS hosts that provide Voxility filtering for around $3 a month (or at no extra cost). So basically without me providing a tutorial (it'll take too long) I am just proving that you do not need to pay for these "high tier" providers for DDoS protection because at the end of the day, they want all your money. All you need is a good amount of RAM, a good CPU and obviously a good network too for the server hosting the minecraft server and then get a cheap VPS that has a good network and ddos protection (like I mentioned, I know a provider that provide voxility filtering for $3/month) and then you can create a GRE tunnel so your players will connect through the filtered (ddos protected) ip address and not the actual backend.
If you are running something like an online store then I suggest just using CloudFlare (mc-market use them too) and making countries (such as China, as I found there are a lot of vulnerable devices there) have to pass javascript challenge.
Well I hope you enjoyed reading this long post, if your require any further assistance or have any questions then just private message me. Don't spam me.
So I want to tell you guys how you can protect your servers (doesn't have to be specifically Minecraft) from DDoS attacks. I don't play Minecraft so don't ask me to come on your server and start assisting you with random shit.
To start with I will explain what a DDoS attack is, DDoS (distributed denial of service) is literally what it says in the name, denial of service. The most common attacks are usually just traffic attacks (high amounts of traffic) flooding a network causing legitimate traffic to usually get dropped resulting in the service not being available to legit players/customers (if you're running some kind of online shop).
To protect your game server you can go with any host you want, go with a cheap host that provide a good amount of RAM, and a good CPU. I know people will say this is a stupid idea because it probably won't have DDoS protection but just continue reading and you will realize why I would set everything up this way. I'll explain... The reason I would purchased a system without DDoS protection is because I am going to be purchasing a cheap VPS that provides DDoS protection and be setting up a GRE (or ipip) tunnel. Most kernels will support GRE tunnel (ip_gre kernel mod). I know some VPS hosts that provide Voxility filtering for around $3 a month (or at no extra cost). So basically without me providing a tutorial (it'll take too long) I am just proving that you do not need to pay for these "high tier" providers for DDoS protection because at the end of the day, they want all your money. All you need is a good amount of RAM, a good CPU and obviously a good network too for the server hosting the minecraft server and then get a cheap VPS that has a good network and ddos protection (like I mentioned, I know a provider that provide voxility filtering for $3/month) and then you can create a GRE tunnel so your players will connect through the filtered (ddos protected) ip address and not the actual backend.
If you are running something like an online store then I suggest just using CloudFlare (mc-market use them too) and making countries (such as China, as I found there are a lot of vulnerable devices there) have to pass javascript challenge.
), and they just started supporting WebSockets on the free plan (which is also nice...if you're into that kinda thing).
