2 ms·
Simple solution: move to OVH. Although they don't have servers in SE Asia, perhaps 100% uptime is more important than shaving 100ms off the ping time. (As far a
by cpncrunch 11y ago
Simple solution: move to OVH. Although they don't have servers in SE Asia, perhaps 100% uptime is more important than shaving 100ms off the ping time. (As far as I can tell they don't have real-time audio or video anyway).
- nly 11y agoWhat makes you think OVH could cope with a 200 Gbps DoS attack of this nature? A quick look at their services indicates they don't mention what kind of attacks they defend against, and SYN floods are some of the hardest to defend against.
- cpncrunch 11y agoThey say they have facilities to clean 480Gbps of data, and 5Tbps of mostly spare inbound bandwidth, so their DDoS mitigation capacity is somewhere in that range (http://www.ovh.com/ca/en/a1171.protection-anti-ddos-service-standard http://www.ovh.com/ca/en/a1171.protection-anti-ddos-service-...).
- gruez 11y ago480Gbps across all their datacenters. Each datacenter only has 160Gbps, and I doubt that they'll devote all of that to one client.
- cpncrunch 11y agoThey do activate all 3 datacenters. https://www.ovh.com/ca/en/anti-ddos/hoovering-up.xml https://www.ovh.com/ca/en/anti-ddos/hoovering-up.xml
- scurvy 11y agoCustomer testimony on places like Webhosting Talk have cast all of those numbers into serious doubt. OVH is more likely to nullroute your IPs than it is to fight off a 300gig attack.
- cpncrunch 11y agoDo you have a ref for that? I did quite a few searches and didn't find a single person on webhostingtalk saying they had been null-routed by OVH in the past year. Only one guy who worked for a competing hosting provider.
- scurvy 11y agoShut down this guy's account during an attack: http://www.webhostingtalk.com/showthread.php?t=1467534&highlight=ovh+null http://www.webhostingtalk.com/showthread.php?t=1467534&highl... That said, I'm not a personal search engine. Here's a link to search results: http://www.webhostingtalk.com/search.php?searchid=1555010 http://www.webhostingtalk.com/search.php?searchid=1555010
- cpncrunch 11y agoHe said OVH didn't give a reason for shutting him down, which seems unusual. Perhaps he's breaking their ToS? OVH themselves say they protect 24/7 against DDoS attacks, regardless of duration or size.
- scurvy 11y agoSYN floods are pretty easy to defend against. Most devices do SYN cookies in hardware at line rate. We run midrange devices that have thwarted 40M PPS SYN floods without a problem. I'm not bragging or anything, just offering a datapoint that SYN floods are easy to stop.
- hhw 11y agoOVH frequently has problems with false positives, or so some of their customers report. They may offer good value for non-critical services, but they aren't exactly known for 100% uptime.
- cpncrunch 11y agoI've been using them since March, and have had 100% uptime during that period. I haven't had any false positives, and the one time they did mitigate a DDoS I didn't even notice it. As I understand it you'll just have a slightly higher ping time when the DDoS is active. An occasional false positive with slightly higher ping time seems a better option than your site being guaranteed to get null-routed for 24 hours (as happened to me on iweb, although I managed to convince them to remove the null route after a few hours).