New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
DDOS Help Needed !
Hello,
We have racks in Mumbai, India
In our network we are facing ddos attacks,
As you know asia network is costly, so our network capacity is not big
So attackers are easily choking our network capacity.
So we are looking for help from experts.
We can pay for help off course.
Please PM me who can help.
Comments
Wait, you provide service and have no clear plan to prevent ddos?
you are provider, and not cheap one, pay extra for Cloudflare enterprise.
https://www.cloudflare.com/en-gb/ddos/
I saw your offers a few times before, if you don't want pay money for fine protection from ddos attacks, then don't cry if it's happened.
We dont claim our india service are ddos protected.
And india location service is still very small. so no protection yet, and you are correct. sorry..
are you really that surprised..?
pmed, good luck
I’am staggered.
EvoShield level 5 can announce your IP addresses and filter out DDoS attacks.
They have a location in Mumbai India.
https://evolution-host.com/remote-ddos-protection.php
Turn off and turn back on again later when they have gone to bed
Aren't they just resold/repackaged OVH? Why not go straight to the source at that point?
What if you are banned by OVH or want to pay with Bitcoin or need a lil more support?
Thank you.
Does OVH offer DDoS protection directly?
Or do you mean that Evolution Host is using OVH to mitigate DDoS attacks through a scrubbing server from OVH?
They resell OVH and tunnel you to OVH's dedicated servers. It's meant for protecting minecraft servers, not an actual network.
Hey Fluffer,
So to clarify, this is inaccurate.
While we do leverage OVH's networking infrastructure in some locations, the OVH DDoS protection leaves a lot to be desired. There are simply many gaps in OVH's protection which result in denial of service (interruptions) to the target server during attack attempts since the attack is not blocked by OVH.
EvoShield is our highly customizable DDoS protection solution, implementing full layer 7 heuristic mitigation for a wide range of applications, game servers and protocols, which is not dependent upon specific providers such as OVH. The service is not available from or dependent upon any third parties.
If you are experiencing interruptions due to DDoS attacks, no matter how sophisticated, we recommend trying out EvoShield remote DDoS protection as you are likely to be impressed by the results.
It's dependent on OVH because you use them for filtering. It's cool that you have tweaked filters on top of that, but your product is entirely reliant on OVH's network. It looks like all of "your" locations line up 1:1 with OVH's facilities as well. Just say it's a GRE tunnel running on OVH servers with your own tweaks running on the dedis, since that's 99% all it is. I'm sure it works okay for protecting gameservers, etc.
Hey,
So to follow up on this, it does seem like you may just have a misconception about what it is we do. We're aware that a lot of companies simply re-sell OVH's service with a few bells and whistles - however Evolution Host has been in operation since 2013 and offers a lot more than basic OVH re-selling.
EvoShield is a standalone DDoS protection solution which is designed to mitigate all forms of attacks which may target supported applications.
If you do not wish to try out our services you can feel free to have a quick browse of our remote DDoS protection docs: https://docs.evolution-host.com/evoshield
I think there is confusion as to what it is exactly you provide on top of OVH's DDoS mitigation. From the pages you link to, it just looks to me like a GUI wrapper of OVH's game server DDoS protection. What you're saying is that it's not, which is totally cool! Maybe you can explain to us how your DDoS mitigation works? The attack goes through OVH's mitigation first, then I assume Evolution Host is doing something (this is the part that is missing), then the doubly cleaned traffic is being passed along via GRE to the client?
https://us.ovhcloud.com/security/game-ddos-protection/
It's basically just that with a few tweaks since OVH protection does have some drawbacks. It's not their protection though, it's just slightly tuned OVH mitigation. That's why they don't have a single location that isn't on OVH's network, because it's not something they'd be able to do entirely by themselves.
I have heard good things about neoprotect.
Hey,
Thanks for the follow up.
So to clarify: We do not leverage OVH's Game DDoS Protection.
In our experience, the OVH GAME product has many fundamental issues which make it unsuitable for some use cases. These include bandwidth limitations, mitigating legitimate traffic and a limited selection of DDoS protection profiles, as well as a lack of mitigation for TCP based attacks. We imagine it can work well in some cases, however EvoShield is a good alternative to consider.
You are certainly correct in that the traffic which we receive is subjected to mitigation by EvoShield in addition to any filtration which may have been applied further upstream (in this case by OVH). EvoShield is a stateful application specific DDoS protection firewall which is designed to ensure that for supported applications, only clean and validated traffic from the users is forwarded to the backend. For example, if you setup an OpenVPN rule on UDP port 1194, any packets sent to this port which are not considered valid in the context of a validated OpenVPN client to server connection will be unable to reach the server.
This concept is applied at scale alongside a wide range of additional techniques with high performance filtration to fully protect your server from attack attempts.
The interface you're seeing in the screenshots (you can view a GIF here: https://evolution-host.com/images/evoshield-panel.gif) leverages our own custom built filtration system.
do u need L3 scrubbing or?
They rely on Datapacket, and Datapacket doesn't have an Indian location.
is there anyone with a scrubbing centre in asia? i thought everyone routes to EU/US, scrubs there and forwards clean traffic
perhaps @RoyaleHosting would know?
So you're performing DPI?
That's correct. All traffic is subjected to real-time deep packet inspection. Only clean/valid traffic is then forwarded along to the protected server.
Just off topic can't we deploy firewalls like those big sophos with dpi to filter all incoming data?
You need capacity for that. Filters are useless if attacker saturates entire link with junk
You can, but you need fat pipes or upstream control.
Imagine 100 motorcycles blocking the entrance to your restaurant.
You can hire a security guard to disallow motorcycles from entering your restaurant, but your customers cannot reach your restaurant because the road is blocked by 100 motorcycles.
You need to either widen the road or call local PD to block motorcycles further up the road.
You're a shill fuck off.