3 ms·

Hetzner is not on the level of the any you mentioned. It's dirt cheap because latencies and protections against exploits are non-existent, sure it serves good w

Hetzner is not on the level of the any you mentioned. It's dirt cheap because latencies and protections against exploits are non-existent, sure it serves good when you don't have such needs but the moment you need any (i.e. DDoS protection and low/stable ms for game servers) - hetzner is out of the window. - Someone that used to fry lil hetzner servers for fun

bflesch 4y ago
Interesting. can you maybe tell us some anecdotes?
- xslvrxslwt 4y ago
  If you mean the anecdotes related to >used to fry lil hetzner servers for fun< https://krebsonsecurity.com/2018/04/ddos-for-hire-service-webstresser-dismantled/ https://krebsonsecurity.com/2018/04/ddos-for-hire-service-we... should be enough
Nextgrid 4y ago
Presumably you can front it with CloudFlare if you need DDoS protection?
- notamy 4y ago
  Not if you're running game servers; those require plain UDP (sometimes TCP) proxying and CF only offers that on the enterprise plan afaik.
  - cma 4y ago
    I'm not sure if this is the enterprise plan, but it is designed for proxying game servers and preventing ddos like steam's newer networking: https://www.cloudflare.com/products/cloudflare-spectrum/ https://www.cloudflare.com/products/cloudflare-spectrum/
    - lazypenguin 4y ago
      It’s incredibly expensive, looked into it before.
- xslvrxslwt 4y ago
  Addition to the replies before mine, even if you could use CF - it's a joke, it's easily bypassable and there's tons of methods to do it (i.e. the most common we used is huge botnets with simply emulated browsers sending tons of req/s, and that's just the 'public' one, there's tons of private ones we used to write ourselves that were much complex but needless as the one I mentioned before worked just fine)
abujazar 4y ago
Not my experience at all. Hetzner obviously does offer DDoS protection and responds quickly to that kind of issues. I've also had Hetzner techs proactively contact me regarding attacks on our infrastructure (none of which actually took any of our servers down, by the way). For specialized needs, you can even have your own hardware installed next by your servers in the same rack for a relatively small premium.
- xslvrxslwt 4y ago
  sir, I'm the former staff member of the infamous webstresser.org, I think I should know what we received millions of dollars for, I understand that you never received attacks of such 'large' scale but it takes $5 to take a hetzner server down (assuming you don't know how to do it yourself)
  - Nextgrid 4y ago
    If you don't mind answering, what was the nature of your attacks? Was it bandwidth exhaustion or layer-7 CPU exhaustion?
  - abujazar 4y ago
    Details would be enlightening : ) Was it the servers or the applications running on the servers that were taken down? Running bare metal servers exposed to the public is a fairly obvious footgun, there should be at least one layer of load balancing in front in addition to the provider’s firewalls. I’d argue MOST publicly exposed servers run by amateurs can be taken down for less than $5. Regardless of them being bare metal at Hetzner or some EC2 instance.

bflesch 4y ago

Interesting. can you maybe tell us some anecdotes?

xslvrxslwt 4y ago
If you mean the anecdotes related to >used to fry lil hetzner servers for fun< https://krebsonsecurity.com/2018/04/ddos-for-hire-service-webstresser-dismantled/ https://krebsonsecurity.com/2018/04/ddos-for-hire-service-we... should be enough

Nextgrid 4y ago

Presumably you can front it with CloudFlare if you need DDoS protection?

notamy 4y ago
Not if you're running game servers; those require plain UDP (sometimes TCP) proxying and CF only offers that on the enterprise plan afaik.
- cma 4y ago
  I'm not sure if this is the enterprise plan, but it is designed for proxying game servers and preventing ddos like steam's newer networking: https://www.cloudflare.com/products/cloudflare-spectrum/ https://www.cloudflare.com/products/cloudflare-spectrum/
  - lazypenguin 4y ago
    It’s incredibly expensive, looked into it before.
xslvrxslwt 4y ago
Addition to the replies before mine, even if you could use CF - it's a joke, it's easily bypassable and there's tons of methods to do it (i.e. the most common we used is huge botnets with simply emulated browsers sending tons of req/s, and that's just the 'public' one, there's tons of private ones we used to write ourselves that were much complex but needless as the one I mentioned before worked just fine)

abujazar 4y ago

Not my experience at all. Hetzner obviously does offer DDoS protection and responds quickly to that kind of issues. I've also had Hetzner techs proactively contact me regarding attacks on our infrastructure (none of which actually took any of our servers down, by the way). For specialized needs, you can even have your own hardware installed next by your servers in the same rack for a relatively small premium.

xslvrxslwt 4y ago
sir, I'm the former staff member of the infamous webstresser.org, I think I should know what we received millions of dollars for, I understand that you never received attacks of such 'large' scale but it takes $5 to take a hetzner server down (assuming you don't know how to do it yourself)
- Nextgrid 4y ago
  If you don't mind answering, what was the nature of your attacks? Was it bandwidth exhaustion or layer-7 CPU exhaustion?
- abujazar 4y ago
  Details would be enlightening : ) Was it the servers or the applications running on the servers that were taken down? Running bare metal servers exposed to the public is a fairly obvious footgun, there should be at least one layer of load balancing in front in addition to the provider’s firewalls. I’d argue MOST publicly exposed servers run by amateurs can be taken down for less than $5. Regardless of them being bare metal at Hetzner or some EC2 instance.