DDOS attack how to protect ?
This days many website suffering from DDOS (Denial of service) attack.
There is not much information and solutions how to protect from DDOS attack,but I will explain little about how to protect from it.
First you should know what type of DDOS attack you receiving,it can be just simple SYN-FLOOD which can be blocked very easy.
If you have Linux server you can check it with command:
netstat -an
And if you see lot of SYN-FLOOD statuses this mean you have SYN-FLOOD attack,if this flood comming from 10-20 ip's you can block them with command:
iptables -A INPUT -s ip_address -j DROP
If you see hundreds of this ip's it will be very hard to block them,then you should download firewall,because iptables don't have functions how to block so big amount of ip's.Sure you can run bash script and block them all but I not recommend you to do this!
If you think what it is not SYN-FLOOD and big DDOS attach from thousands different ip's there is some solutions:
- You should buy other server which offering protection from DDOS,this server are not cheap,starting from 300 $/month
- Or you can buy just protection,I'm not sure how much it cost but something from 200 $/month,this protection is good because you will redirect your domain to protected DNS server,and all your DDOS traffic will be filtered,and your website will be online again.
Second thing is to analyze who want to DDOS your website,from where this attack is comming from,maybe you have some enemy,or competitor who want to discrupt you.
If you have questions or want more information about it,just post replu to this thread.
|