Anyone know anything about responding to a DDOS attack?
Several of our sites have been under attack for the last 24 hours and our current web host is unable to deal effectively with the problem.
I've read of some hard and soft solutions, but I have no idea how effective they are.
If we have to switch to a managed dedicated server solution, we'll do it. Even to the point of having multiple hosts and switching between them - specific URLs are unimportant to us, we pay for about 1/4 million pageviews a day which can be changed to a different URL at the drop of a hat.
Posted by fugu13 (Member # 2859) on :
Part of it depends on what you think the reason is, and the likelihood of repeat/continuation.
And it is definitely DDoS, not just DoS from a few hosts?
Probably the easiest long-term solution will be to move to a managed server where you're on top of one of the bigger, more central pipes -- because such places aren't going to tolerate such shenanigans and will move to shut them down themselves.
It sounds like you're mostly on shared hosting, currently? If so, there isn't much you can do other than temporarily disconnecting/moving your domain names.
Posted by Troubadour (Member # 83) on :
Thanks Fugu,
yeah, we're sure it's DDoS and our current host confirms. We're on one of their VPS plans, but we'd been considering managed dedicated anyway.
The current hosts don't have much of a clue about dealing with this, however - so moving to someone with nice fat pipes and a low tolerance for scriptkiddies would be good.
Obviously full-disclosure is probably necessary when signing up?
Posted by fugu13 (Member # 2859) on :
If you're likely to be targeted again for some reason, there's a slight possibility it would be an issue. But you can just say "our old host was unable to deal with the situation when we were targeted by a DDoS attack. We're looking for hosting that can protect us from those in the future", and I doubt they'll have any problem.
Posted by Troubadour (Member # 83) on :