

Also, during an DDOS attack, you will be working very closely with the hosting center's staff, so know their emergency numbers and be on good terms with them :) They should be able to block of whole international regions, completely block specific services or network protocols and other broad-spectrum defensive measures, or alternatively allow only whitelisted IPs (depending on your business model)

This is critical: Many sites are pulled from the internet by the hosting company as the hosting company deals with the data center-wide disruption caused by the DDOS to one customer. Work with your hosting center to understand the services they offer, including IP and port filtering at their network connections to the internet and firewall services they offer.In this latter case, you shouldn't be using StackExchange :) Anyway, to defend against DDOS, you need a defence in-depth approach: For a paid-for, public-facing, mission-critical system for an established multi-billion dollar business, the value might be the worth of the company. For a non-critical, free-to-use service for a small community, the total value at risk might be peanuts. Your web servers, application servers and database.īefore you start on building your DDOS defence, consider what the worst-case value-at-risk is.The hosting center's internal network and routers.The hosting center's network connection to the internet.DDOS is a family of attacks which overwhelm key systems in the datacenter including:
