4 ms·

I guess that depends on where you live, I have almost the same upload vs download speed on my ISP Bahnhof in Sweden. Proof: https://www.speedtest.net/result/14

by dijit 4y ago

I guess that depends on where you live, I have almost the same upload vs download speed on my ISP Bahnhof in Sweden. Proof: https://www.speedtest.net/result/14437484691.png https://www.speedtest.net/result/14437484691.png I am always worried about someone deciding to DDoS me though.

Nextgrid 4y ago
To be fair, they can do that just fine regardless of whether you’re running externally-available services. Most untargeted, low-effort DDoS relies on filling up all your bandwidth with spam traffic, not exploiting some layer-7 vulnerability in an application you host.
- charcircuit 4y ago
  Who does untargetted layer 3/4 DDoS? Why would an attacker waste money booting a website that gets 0 visitors?
  - dijit 4y ago
    By "untargetted" the parent almost certainly means "not tailored to take down the site". Some people do smart things and find a page that is heavy for your computer to process and hit it a lot. Some people decide they don't like your service (or you) and flood you.
lucb1e 4y ago
> I am always worried about someone deciding to DDoS me though. I've hosted a Tor exit node and other questionable stuff as a teenager, going from 1mbps upload to 50 mbps today. The site has been on the HN homepage, sometimes get featured on news sites like zdnet (that article gave me clicks for years on end), plus I run a file sharing service where anyone can post literally anything but the links are valid for one day. It has definitely hosted links to phishing and malware in the past (and I combat that when I see it, like replacing the short link with an info page "this was a phishing page" + infos). In ~15 years, I never noticed anyone trying to take down the site. But your sentiment keeps being echoed in places like r/selfhosted and moves people to put their services behind some traffic inspection service, reducing the decentralized to a few places where all traffic passes through (often with decryption keys made available to them). It's still good to self host even if you do that, but I do feel a bit conflicted about that and wouldn't do it myself.
toast0 4y ago
DDoS risk seems to be related to the type of services you're hosting. If you host openly available game services or adult media, those seem to attract DDoS, and you need a good relationship with your upstream. If you're just hosting personal things, you're not likely to get DDoSed except for people just hitting random IPs, which could get you anyway. If it happens, not too much you can do, other than move to real hosting, and let them know upfront, or they'll drop you quick. Note that the first line of DDoS defense at your real hosting is going to be null routing your IP: dropping traffic to that IP, preferably on their upstreams' routers. That's normal and ok, although frustrating for you; doing better has costs.

by dijit 4y ago

Nextgrid 4y ago

To be fair, they can do that just fine regardless of whether you’re running externally-available services. Most untargeted, low-effort DDoS relies on filling up all your bandwidth with spam traffic, not exploiting some layer-7 vulnerability in an application you host.

charcircuit 4y ago
Who does untargetted layer 3/4 DDoS? Why would an attacker waste money booting a website that gets 0 visitors?
- dijit 4y ago
  By "untargetted" the parent almost certainly means "not tailored to take down the site". Some people do smart things and find a page that is heavy for your computer to process and hit it a lot. Some people decide they don't like your service (or you) and flood you.

lucb1e 4y ago

> I am always worried about someone deciding to DDoS me though. I've hosted a Tor exit node and other questionable stuff as a teenager, going from 1mbps upload to 50 mbps today. The site has been on the HN homepage, sometimes get featured on news sites like zdnet (that article gave me clicks for years on end), plus I run a file sharing service where anyone can post literally anything but the links are valid for one day. It has definitely hosted links to phishing and malware in the past (and I combat that when I see it, like replacing the short link with an info page "this was a phishing page" + infos). In ~15 years, I never noticed anyone trying to take down the site. But your sentiment keeps being echoed in places like r/selfhosted and moves people to put their services behind some traffic inspection service, reducing the decentralized to a few places where all traffic passes through (often with decryption keys made available to them). It's still good to self host even if you do that, but I do feel a bit conflicted about that and wouldn't do it myself.

toast0 4y ago

DDoS risk seems to be related to the type of services you're hosting. If you host openly available game services or adult media, those seem to attract DDoS, and you need a good relationship with your upstream. If you're just hosting personal things, you're not likely to get DDoSed except for people just hitting random IPs, which could get you anyway. If it happens, not too much you can do, other than move to real hosting, and let them know upfront, or they'll drop you quick. Note that the first line of DDoS defense at your real hosting is going to be null routing your IP: dropping traffic to that IP, preferably on their upstreams' routers. That's normal and ok, although frustrating for you; doing better has costs.