neoprotect down due to DDoS and CDN77 / Datapacket has deactivated all BGP sessions

bobert

@filtered said: What you have to realize is that the average client getting attacked is slim-to-none. This is a single client that was receiving more than average DDoS attacks as they were reselling services to high-risk clients. This is going to put the client's 95th percentile much higher... I don't know what Neoprotect was paying Datapacket, but odds are they were pushing five+ figures of mitigation costs monthly because they were reselling.

I'd assume their filtering also wasn't doing a great job on the attack, compounding issues.

Many datapacket clients are high profile and even in the gaming sector like discord or esl. They are not lowend users with a website that gets 100 views a month. Take a look at their clients here.

https://www.cdn77.com/

There's no other reason to pay all this money for the datapacket premium. If you didn't need this, then you would save a lot more money by going for a cheaper host.

Also neoprotect having bad filtering isn't going to change anything. The data goes through datapacket first before being filtered on a server.

@blip1945 said: Not a fan of centralisation of cloudflare, but they're probably the only provider that could handle that magnitude of ddos, for free on top.

Unfortunately cloudflare only does http for free. For anything else, it is $3000/month minimum.

Protocol903

@bobert said: For anything else, it is $3000/month minimum.

A friend of mine is paying $1000/month for their Enterprise plan. He is getting 10 Cloudflare IPv4 which he then flips off to sell FIveM servers through GRE tunneling. The core servers are hosted on OVH because of location. All of those 10 IPs are anycasted.

This is after getting 1st year for free through their startup offer or something.

gremeyer

@Protocol903 said:
This is after getting 1st year for free through their startup offer or something.

I'm interested in knowing how the approval process went, Cloudflare sales can be a pain to deal with.

Protocol903

@gremeyer said: I'm interested in knowing how the approval process went, Cloudflare sales can be a pain to deal with.

All I know is you need to have a registered business and legitimate business operation going on that requires Cloudflare.

slideFactor

Got an email from DataPacket about new Terms & conditions effective November 13. I think the DDoS-related part in the AUP is new and direct result of this:

3.10 Prohibited DDoS-Filtering Services and Excessive DDoS Traffic

Customers shall not use the Services to operate, provide, or resell any standalone DDoS-filtering, DDoS-mitigation, traffic-scrubbing, reverse-proxy, or GRE-tunnel protection services for third parties or for IP space not assigned by Supplier to Customer's services. Supplier-provided DDoS protection may be used solely to safeguard the Customer's own services running on Supplier hardware and Supplier-assigned IP space. Any operation of such services within the Supplier's network for third parties or for IP space not assigned by Supplier to Customer's services constitutes a material breach of this AUP.

If the Customer engages in any such prohibited activity, or if the Supplier reasonably determines that the Customer is operating or has operated DDoS-filtering or mitigation services without prior written disclosure and approval, the Supplier reserves the right to immediately suspend or terminate the Services without notice.

In addition, where the Supplier reasonably determines that a Customer is the target of excessive, sustained, or repeated DDoS attacks that materially affect the stability, performance, or integrity of the Supplier's network, the Supplier may (i) temporarily disable or suspend the affected Services to protect its infrastructure and other customers; and (ii) if such attacks persist or recur, terminate the affected Services upon written notice.