New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Need advice on choosing DDoS protection provider
Hey LET,
I have 3 options currently.
- Get a Datapacket upstream vps and use GRE/VXLAN tunnel to protect my hypervisor in Singapore
- Use GSL from my upstream provider with application specific filter
- Use TCPSheild Sentry to protect my backend
I'm confused as to which one should I go with. I heard dp blocks UDP completely during attacks. While GSL gives me the best latency and my provider cannot guarantee attacks are mitigated for some reason. Let me know your thoughts, thanks 👍
Comments
Use GSL
I'm slightly inclined towards GSL but my provider says they cannot guarantee mitigation, and i can't understand why
Hey, if you want to consider other options, you can check us out at https://terabit.io, we provide DDoS in Singapore and (almost) everywhere else in the world.
Terabit has over 500tbps of volumetric capacity and filters for all popular games at affordable prices. We use Cloudflare, GSL, DP, and many others for volumetric mitigation.
I'm just curious why your provider said they cant guarantee mitigation on GSL? Weird
Yeah I actually asked for a quote in terabit but it's currently way out of my budget, but I'll definitely be using that in future.
They say if we allow everyone to have application filters it will attract more people who are DDoSed frequently which they don't want clearly, that's why they don't guarantee anything to keep frequently attacked people away
Is that cup of noodle win thingy for real? I mean, I despise discord but for a good cup of noodles.... Any thing goes.
Datapacket is not allowing to use their services for this kind of remote protection anymore.
Not really but if you join I will make it real
I also despise discord
> @AdiOnLET said:
That's... a different approach... is all i can safely say
No provider can guarantee an attack is mitigated, they probably are saying to you that in the event that it's not mitigated, they don't offer support to resolve it which is largely the same with other providers like Datapacket even.
What provider are you currently with?
I think they're allowing it now.
VibeGAMES B.V. (AS48925) is using AS60068 to protect game servers.
I'm currently using GSL only
Well it's not allowed, but people can use dp reseller to use dp network directly
Your hardware is hosted with them?
It should be webhorizon or advinservers I think, they're using GSL
Not with GSL, my provider uses them for transit
Ahh ok
Just so you know:
GSL will over-mitigate by default if you care about UDP, as it's not always inlined
DP will drop all UDP for 2-3 seconds as they engage, as it's not always inlined
Cloudflare will seamlessly inspect since it's always inline without over-mitigating usually (CF leans towards under-mitigating)
If you want it at lowend price you can get BuyVM VPS and $3 ddos protected IP
https://wiki.buyvm.net/doku.php/ddos
Then just run GRE Tunnel or nginx reverse proxy according to your needs to the backend.
Did this myself in the past, works well
EvoShield remote DDoS protection is available in Singapore.
Service is delivered via GRE tunnel, or you can buy EvoShield VPS and setup tunnel yourself.
Is it available on Singapore?