DDos Atack question

[jure12]

Regards,
I'm interested in how to defend against DDoS atack? I have a VPS with CentOS.
Thaks

 

[Long]

You can install software firewalls / management systems.

I suggest the following running together,
Ddos Deflate - http://deflate.medialayer.com/
ConfigServer Security & Firewall - http://www.configserver.com/free/csf/readme.txt

Other than a software firewall you're rather limited unless you're looking to spend a pretty decent amount of money.

There is services which can help mitigate Ddos attacks and most DataCenters offer hardware protection, but both will set you back some $.

Best of luck.

 

[jure12]

I am able to pay $ 15 if anyone is willing to let me know
Thanks

 

[msk19994]

is someone attacking u ?

 

[jure12]

What do you think if I ask this question.

 

[msk19994]

use cloudflare for free protection use high settings

 

[jure12]

Where exactly is "High settings" ? Under what options are available?

 

[msk19994]

https://www.cloudflare.com/features-security

 

[Smith]

I am able to pay $ 15 if anyone is willing to let me know
Thanks

You'll need to spend way more.

Prices range from $200 and can go up to $1000 or more, depending on how big and constant those attacks are.

 

[ReverseHosts]

Regards,
I'm interested in how to defend against DDoS atack? I have a VPS with CentOS.
Thaks

There is virtually no way to fully defend against a DDoS attack, even with hardware protection. But there are ways to kinda make it less powerful.

 

[bnehost]

My question is... How do you know you're being attacked? Are you 100% sure that you're being attacked?

 

[Apathetic]

Your first step is to limit the no. requests per IP.

 

[jure12]

the solution is CloudFlare ?

 

[Long]

the solution is CloudFlare ?

Well cloudflare may help some, but once you're getting any noticeable Ddos they usually just shut you off.

 

[jure12]

My question is... How do you know you're being attacked? Are you 100% sure that you're being attacked?

I am 100 % sure. Every day at approximately 18:00 pm begin DDoS Attack. Takes a couple of hours about 5-6 hours.

As I'm sure?
Would respond in a way that my memory is full frame to 100%. Before the attacks stands at 15-20% and suddenly jumps to 100%. And so stend 5-6 hours ( 70% - 100% )

 

[Tango]

If you use ddosdeflate your going to need a lot of ram & decent CPU usage allowance to migrate anything at all.

Try cloudflare on highest security setting as suggested

 

[jure12]

Thank you very much @Gavo

 

[bnehost]

If you need any assistance with cloudflare and settings you can message me and i will help you out.

 

[Cheetah]

I highly suspect that its a normal traffic spike during peek hours and your server config/web server settings/php settings are not strong enough to handle that much traffic.
Is there any particular reasons or logs to prove that its indeed a ddos attack ?
Whats the network usage during the attack?

 

[jure12]

I highly suspect that its a normal traffic spike during peek hours and your server config/web server settings/php settings are not strong enough to handle that much traffic.
Is there any particular reasons or logs to prove that its indeed a ddos attack ?
Whats the network usage during the attack?

Of course there is reason to think that is DDoS attack.
I own the VPS and VPS have enough RAM memory (more than is necessary I have).
Memory is about 15-20% all the time and suddenly drastic jump to 100%. It happens every day from 18:00 to 24:00 approximately. Now that I've switched to CloudFlare DNS memory is at 20% all the time. From the log file see pic. -> http://zaslike.com/files/i7wk9oz83n32pmxrn9xx.jpg

---------- Post added at 10:25 PM ---------- Previous post was at 07:07 PM ----------

I have a question regarding the CloudFlare.
I see all my users come from the same IP address. As I see it there CloudFlare mode that can be installed on VPS.
The mode is called "mod_cloudflare" and if it is installed then I see the real users IP addresses. Does anyone know how to install this mod on CentOS?