New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Comments
Are you saying you now have 2 x 10Gbps IP Transit links from a provider?
I very much doubt it. The way i understood it is that he (for whatever reason) added 10Gbps connections to the VPS nodes as if that would change anything about the external link being congested. I also doubt that we'll get much of an explanation.
Probably added sfp module from switch to server node
I also figured that's what he was saying, however we both know that would make no difference to the bottleneck which is the WAN @ 3Gbps, so wanted to see if he could explain his reasoning.
Yes but why?
At this point it is probably desperation.
Yes that would pretty interesting. I had already thought about asking about it yesterday evening but then decided against it since i didn't expect to get an answer anyways.
Yeah, could be but it being so obviously pointless my brain simply goes on strike when i tell it to acknowledge that answer...
He refuses to understand that filtering AFTER the traffic is already congesting his link is completely pointless.
How can one be so clueless and ignorant at the same time?
So many providers offered helpful advice but he continues to do the exact opposite
2x 10Gbps because I want to enter my unfiltered traffic on one port, filter it on a Linux server and take it out on the other port back into the switch (a separate vlan) to reach the virtualization servers.
Lol you will not filter much on Linux server
A few M pps and you are done
get path.net and be done with it
How much would cost DDoS filtering hardware on olx.ro ?
You do realise though that this will do nothing to help with your DDoS Mitigation?
In the simplist of terms, You need more external transit / throughput than the DDoS Attack size.
e.g.
25Gbps Amplified DNS Attack
You need at least 26Gbps of IP Transit on the WAN otherwise your internet connection will be 100% saturated, and it doesn't matter what you do within your LAN, as your WAN is already saturated / offline. You could have 100Gbps LAN with a stack of bare metal scrubbing machines with eBPF and XDP in-line filtering, but with only 3Gbps WAN, you're offline before it can do anything.
The above scenario is assuming you're the only one scrubbing traffic, and you don't have any BGP flowspec upstream, which you don't.
As I previously mentioned, your best bet is to use an external scrubbing service, I did DM you one which offers a completely free trial, and starts their offerings for 100 euro a month. I think there are quite a few of us that are happy to help / give you direction.
Scrubbing torrent traffic, vpn and plex boxes aren't in his priority. No sane person hosts anything remotely production. Did you see any threads with comolaints about blackout? His clients does not care.
This is all part of his master plan to get everyone talking about hazi
This is his master plan that everyone rather make backup and leave lol sh*t "host" ever
I seriously don't understand why you people are wasting their time here to offer free advice.
Some lessons in my life:
Don't offer free advice
Don't offer free advice to idiots
Ask what the information cost you to obtain + profit margin so you can eat
Also, avoid idiot providers. Like Andre from Hetnix said, you pay a provider also for their infrastructure and expertise.
It is soooo 2004 to run a hosting company withour DDOS scrubbing/BGP communities/filtering. But hey, if you don't have any knowledge on that, you should not be in business, nobody should buy from you.
What HAZI is charging, instead I would go with an established provider, even spending 8 instead of 4euro who cares.
Now you are advising him about this, before it was flooding, he is just an ignorant fool, next time it wiill be the next problem, it is not like he sent 500 euro to the person recommending him the flooding issue.....
Bro cannot afford 26Gbps transit.
Bro needs to use in-house filtering and not delegate to Path.net because network attack filtering is his class project.
Bro has no idea how BGP blackhole community works because the faculty didn't teach this.
vpn?
ugh, came here searching for new affordable data hosting since hazi.ro suffered way too many periodic outages, only to see this gem of a topic. Peanuts and monkeys.
(I understand a service like this won't be perfect, but maybe a little status update by e-mail, or if not that on the website?)
There are lots of other options. The one that goes Brr is my favorite lately coming to ultra cheap yet reliable service.
Most of the servers used for reselling are 1Gbps and as far as I know Hetzner does not excel in terms of DDoS protection, I myself know providers who have BGP with Voxility with servers colocated at Hetzner for this very reason.
What is your information based on, except the luck of never having attacks like the ones I'm currently facing?
sure, it’s just luck and nothing else
Even azure and AWS are successful just because of luck
Hetzner have pretty decent DDoS protection at least for dedicated servers, we had both various TCP floods and UDP amplification attacks against our main web/email server, Hetzner filters both pretty well. Probably not suitable for UDP applications requiring specific DPI rules, but generally works pretty well given Hetzner's price.
I can second this. Been a while and i'd have to dig up numbers but it was a couple gbit and all i noticed was some small hickups and an email from Hetzner informing me that they had filtered it.
@labze brr storage is IPv6-only.
IPv6-only service experiences much fewer attacks.
The issue was fixed? My server is completely unstable, I tried to perform a speed test and I don't get any result
The party started again.
IPv6 goes brr
how? you have 2x 10Gbit no? + ovh