4 ms·
What makes you think OVH could cope with a 200 Gbps DoS attack of this nature? A quick look at their services indicates they don't mention what kind of attacks
by nly 11y ago
What makes you think OVH could cope with a 200 Gbps DoS attack of this nature? A quick look at their services indicates they don't mention what kind of attacks they defend against, and SYN floods are some of the hardest to defend against.
- cpncrunch 11y agoThey say they have facilities to clean 480Gbps of data, and 5Tbps of mostly spare inbound bandwidth, so their DDoS mitigation capacity is somewhere in that range (http://www.ovh.com/ca/en/a1171.protection-anti-ddos-service-standard http://www.ovh.com/ca/en/a1171.protection-anti-ddos-service-...).
- gruez 11y ago480Gbps across all their datacenters. Each datacenter only has 160Gbps, and I doubt that they'll devote all of that to one client.
- cpncrunch 11y agoThey do activate all 3 datacenters. https://www.ovh.com/ca/en/anti-ddos/hoovering-up.xml https://www.ovh.com/ca/en/anti-ddos/hoovering-up.xml
- scurvy 11y agoCustomer testimony on places like Webhosting Talk have cast all of those numbers into serious doubt. OVH is more likely to nullroute your IPs than it is to fight off a 300gig attack.
- cpncrunch 11y agoDo you have a ref for that? I did quite a few searches and didn't find a single person on webhostingtalk saying they had been null-routed by OVH in the past year. Only one guy who worked for a competing hosting provider.
- scurvy 11y agoShut down this guy's account during an attack: http://www.webhostingtalk.com/showthread.php?t=1467534&highlight=ovh+null http://www.webhostingtalk.com/showthread.php?t=1467534&highl... That said, I'm not a personal search engine. Here's a link to search results: http://www.webhostingtalk.com/search.php?searchid=1555010 http://www.webhostingtalk.com/search.php?searchid=1555010
- cpncrunch 11y agoHe said OVH didn't give a reason for shutting him down, which seems unusual. Perhaps he's breaking their ToS? OVH themselves say they protect 24/7 against DDoS attacks, regardless of duration or size.
- scurvy 11y agoSYN floods are pretty easy to defend against. Most devices do SYN cookies in hardware at line rate. We run midrange devices that have thwarted 40M PPS SYN floods without a problem. I'm not bragging or anything, just offering a datapoint that SYN floods are easy to stop.