Need a DDOS protection service for a shared server

Portal Home > Knowledgebase > Articles Database > Need a DDOS protection service for a shared server

Posted by CoolMike, 10-02-2015, 04:10 AM
Hi We are at the moment under a ddos attack. The attack is 8GBit, our router can handle the traffic, but our 1Gbit Switch not. We blackholed now the IP of the attacked server, so the traffic is not coming to our network anymore. But ofcourse, now the attacked server is not reachable anymore. The attached server is a shared webhosting server with about 350 customers. The attack is a UDP attack to the main server IP on port 80. I did change the main ip of this server yesterday, but unfortunately the attack came back today on the new IP. Can someone recommend a solution to filter out the traffic? Are there any solution which we can implement immediately? Regards Michael
Posted by MilesWeb, 10-02-2015, 09:11 AM
Hi Michael, Looking at the nature of attack a hardware firewall would be able to mitigate the attack. Software firewall won't be able to help much in this scenario.
Posted by Softsys Hosting, 10-02-2015, 09:54 AM
I suspect the attack is on one of the shared website and not specifically "IP" because the attack returned back after you changed IP address. If you are able to identify the suspected website (from logs, etc), it would be very helpful so that you can remove / change A record of domain in question to something like 127.0.0.1 so that entire server is not affected.
Posted by CoolMike, 10-03-2015, 01:22 AM
Yes, this would be very helpfull, but it's a udp attack, therefore I don't get any information in the apache logfiles.
Posted by Srv24x7, 10-03-2015, 10:13 AM
Hi, This is only if you have CSF installed. Did you try configuring the UDP PORT FLOOD. Give a try to something like the below one to check if it can handle it or not. PORTFLOOD = "80;udp;20;5,443;udp;20;5," In Addition, also check for the section UDPFLOOD

Add to Favourites Print this Article