Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Advertise on LowEndTalk.com
ACTUALLY DDoS Protected VPS ~44Gbps NTP Reflection (UDP)
New on LowEndTalk? Please read our 'Community Rules' by clicking on it in the right menu!

ACTUALLY DDoS Protected VPS ~44Gbps NTP Reflection (UDP)

Hello LowEndTalk,

It seems someone here really doesn't want us to be around, but we're not giving up anytime soon. We're currently looking for a solution that could handle approximately 44Gbps of NTP Reflection attack (UDP), as well as UDP SYN slowflood. We are currently working to cover the other layers (with DNSSec and SiteLock).

We currently need something on the BlackLotus 100Ge network, or a similar offer; a server that can act as the front-end to handle and filter the brunt of the attacks. We plan to install Open Daylight to filter anything that gets past the protection, and SiteLock to protect against WAF and related.

Price need not be within the LET range, PM offers.

Best Regards!

Acting Director of Albino Geek Services Ltd. My Keybase ID ( gh )
GoodHosting.co | Enterprise KVM Virtual Private Servers | Twitter / Status : @ GoodHostingCo

«13

Comments

  • Hey @goodhosting contact Versaweb they use blacklotus.

  • MunMun Member without signature

    said: Price need not be within the LET range, PM offers.

    Bahahahahahahahahahahaah

    You are funny.

  • @Mun said:

    I can't expect a DDoS protection that actually works to be within LET price range.

    Acting Director of Albino Geek Services Ltd. My Keybase ID ( gh )
    GoodHosting.co | Enterprise KVM Virtual Private Servers | Twitter / Status : @ GoodHostingCo

  • @Shivam said:
    Hey goodhosting contact Versaweb they use blacklotus.

    Already looked into that, sadly they were unwilling.

    Acting Director of Albino Geek Services Ltd. My Keybase ID ( gh )
    GoodHosting.co | Enterprise KVM Virtual Private Servers | Twitter / Status : @ GoodHostingCo

  • MunMun Member without signature

    @GoodHosting said:

    Indeed.

    Up your looking price.

    In regards to versaweb:

  • I guess you dont want to use OVH ?

  • @Mun said:

    Yup, we are being hit with well over 10Gbps (NTP Reflection goes well over 200Gbps if done correctly, check CloudFlare's "The DDoS that almost broke the internet" series of articles.)

    Acting Director of Albino Geek Services Ltd. My Keybase ID ( gh )
    GoodHosting.co | Enterprise KVM Virtual Private Servers | Twitter / Status : @ GoodHostingCo

  • What about reliablesite.net ? but they might charge a bomb

  • Ah nevermind they only do up to 20 GBPS and dam $580 / month :I

  • @Shivam said:
    What about reliablesite.net ? but they might charge a bomb

    They got me a price that made sense, but said they wouldn't be able to handle over 50Gbps reliably, so I'm still looking (sadly.)

    Acting Director of Albino Geek Services Ltd. My Keybase ID ( gh )
    GoodHosting.co | Enterprise KVM Virtual Private Servers | Twitter / Status : @ GoodHostingCo

  • @Goodhosting

    Can't you contact Black Lotus yourself for a quote?

  • @xDutchy said:
    Can't you contact Black Lotus yourself for a quote?

    I have, as well as Staminus. Neither have replied yet (going on 6 hours, max 24 hours apparently; as per their regular contact times.) BlackLotus' phone number is always "Busy" so I can't even phone them (?)

    Acting Director of Albino Geek Services Ltd. My Keybase ID ( gh )
    GoodHosting.co | Enterprise KVM Virtual Private Servers | Twitter / Status : @ GoodHostingCo

  • MunMun Member without signature

    You should try and figure out what is being attacked and split up it as best as you can.

  • @Mun said:
    You should try and figure out what is being attacked and split up it as best as you can.

    They're just blindly attacking whatever our site (goodhosting.co) resolves to.

    Acting Director of Albino Geek Services Ltd. My Keybase ID ( gh )
    GoodHosting.co | Enterprise KVM Virtual Private Servers | Twitter / Status : @ GoodHostingCo

  • MunMun Member without signature

    business plan on cloudflare with under attack mode might help?

  • MunMun Member without signature

    You could probably PM / tweet the CEO of cloudflare and tell him what is up and he might help.

  • NekkiNekki Moderator
    edited August 2014

    Point the domain at Microsoft.com or summat.

    Here lies Nekki. He loved massive amounts of storage, K-Pop and calling people cunts.

  • said: UDP SYN slowflood

    What exactly is an UDP SYN?

    Thanked by 1linuxthefish
  • @Nekki said:
    Point the domain at Microsoft.com or summat.

    lol

  • @Nekki said:
    Point the domain at Microsoft.com or summat.

    Nekki! I have not seen you in awhile!

    Thanked by 3Pwner PremiumN berkay

    Is inflation really at 0.5%? What a conundrum...

    eddynetweb.net | DigitalOcean referral.

  • AnthonySmithAnthonySmith Top Provider

    @Nekki said:
    Point the domain at Microsoft.com or summat.

    I wonder how the NSA would react to someone pointing a DDOS target domain at one of their IP's ... they would probably hold you responsible for the attack I guess.

  • NekkiNekki Moderator

    @AnthonySmith said:
    I wonder how the NSA would react to someone pointing a DDOS target domain at one of their IP's ... they would probably hold you responsible for the attack I guess.

    I strongly suspect someone would be out to introduce your metaphorical anus to the metaphorical rake.

    Here lies Nekki. He loved massive amounts of storage, K-Pop and calling people cunts.

  • fileMEDIAfileMEDIA Member
    edited August 2014

    Prolexic or Arbor Networks cloud protection. Both with GRE back tunnel or leased line.

    fileMEDIA - Dedify: German Private Cloud @ https://www.dedify.com - CloudStack+XenServer+SSD

  • Incapsula. Or, Centarra claims that they have 100G protection. Spin up a VM and try?

    Cheap VPS - VPSDime

  • Awmusic12635Awmusic12635 Member, Provider

    Just get cloudflare business or use OVH

    Subnet Labs, LLC Contact Us Deploy to: Seattle, Dallas or NYC
    Impact VPS | Cloud Servers | Storage Servers | Impact Shared | Shared Hosting

  • KomplanarKomplanar Member
    edited August 2014

    incapsula, prolexic/akamai or cloudflare?

  • @Mun said:
    business plan on cloudflare with under attack mode might help?

    Didn't do anything last I tried, I'll try again.

    Acting Director of Albino Geek Services Ltd. My Keybase ID ( gh )
    GoodHosting.co | Enterprise KVM Virtual Private Servers | Twitter / Status : @ GoodHostingCo

  • tr1ckytr1cky Member
    edited August 2014

    Go for CloudFlare, configure your backend approximately> @GoodHosting said:

    Didn't do anything last I tried, I'll try again.

    Does the DDoS protection page of them bother you? You'd also need to have a mail server that doesn't expose backend IPs in the mail headers (e.g. amazon SES).
    Could write a simple script to turn on the DDoS protection page of them while being under a certain cpu load.

    tsdns.io - free, redundant, DDoS-protected TSDNS

  • NekkiNekki Moderator

    @GoodHosting said:
    Didn't do anything last I tried, I'll try again.

    Remember to click the little cloud icon until it goes orange.

    Thanked by 1linuxthefish

    Here lies Nekki. He loved massive amounts of storage, K-Pop and calling people cunts.

  • SplitIceSplitIce Member, Provider

    https://www.x4b.net/protection/ddos-prices

    Romanian services (Voxility) can do this without a problem, Voxility handles Amplification (i.e NTP AMP) at the Datacenter Filter level (meaning its not a problem at up to 500Gbps)

    More information: https://www.x4b.net/kb/RomanianProtection

    X4B - DDoS Protection: Affordable Anycast DDoS protection including Layer 7 mitigation with PoPs in the US, EU and Asia.
    Latest Offer: Black Friday 2019 Offer
  • AnthonySmith said: I wonder how the NSA would react to someone pointing a DDOS target domain at one of their IP's ... they would probably hold you responsible for the attack I guess.

    "This is what happens when we have net neutrality."

    My personal blog and website | Freelance web developer & programmer. HTML/CSS/PHP/JS (Clientside & Serverside)/C# and more

    Installing Observium on Debian

  • BlackLotus

    Hasn't bothered contacting us or returning our calls, their phone line is busy/dead.

    Staminus

    Got back to us with a reasonable price for what they protect, far too expensive for a LET host though.

    Incapsula

    The guy on LiveChat was clueless, waiting to talk to someone over the phone now.

    Acting Director of Albino Geek Services Ltd. My Keybase ID ( gh )
    GoodHosting.co | Enterprise KVM Virtual Private Servers | Twitter / Status : @ GoodHostingCo

  • @SplitIce said:
    Romanian services (Voxility) can do this without a problem, Voxility handles Amplification (i.e NTP AMP) at the Datacenter Filter level (meaning its not a problem at up to 500Gbps)

    Their traffic costs would put them over Staminus' quote.

    Acting Director of Albino Geek Services Ltd. My Keybase ID ( gh )
    GoodHosting.co | Enterprise KVM Virtual Private Servers | Twitter / Status : @ GoodHostingCo

  • ZweiTigerZweiTiger Member, Provider

    @GoodHosting said:
    Their traffic costs would put them over Staminus' quote.

    Uhm.. online.net DDOS bussiness or pro package? Maybe could handle the things. But i dont know how much they could handle.

  • C E N T A R R A

    Cheap VPS - VPSDime

  • I recommend you spin up a Centarra VPS, 100 gigabit filtering.. for as little as 7 bucks

  • @serverian said:
    C E N T A R R A

    @JoeMerit said:
    I recommend you spin up a Centarra VPS, 100 gigabit filtering.. for as little as 7 bucks

    We're doing that at the moment, still waiting for it to deploy.

    Acting Director of Albino Geek Services Ltd. My Keybase ID ( gh )
    GoodHosting.co | Enterprise KVM Virtual Private Servers | Twitter / Status : @ GoodHostingCo

  • BrianHarrisonBrianHarrison Member, Provider

    @serverian said:
    C E N T A R R A

    They would be a good bet -- kaniini really knows his stuff. However, I can't imagine any company wanting to bring that kind of traffic to their network without a hefty price tag attached. Best of luck to you.

    Reprise Hosting (AS62838) Intel Xeon L5520, 1TB SATA, 4GB RAM, 10TB BW, $27/mo with DED10 promo! Cheap dedicated servers.
    VPSHostingDeal.com - Low-cost self-managed OpenVZ + Xen cheap VPS hosting. Plans starting at $12 PER YEAR! Cheap VPS.

  • You totally need blacklotus. But they are not LE* friendly :-) If you want it done right, pay for it. Alternatively, try Firehost.

  • HA! I just noticed "nenolod" in the Centarra Screenshot. I recognize the name from EFnet and other networks. This guy knows what he's doing.

  • DylanDylan Member
    edited August 2014

    BrianHarrison said: They would be a good bet -- kaniini really knows his stuff.

    He apparently left Centarra (and the hosting industry) "many months" ago:

    http://lowendtalk.com/discussion/comment/681585/#Comment_681585

  • InfinityInfinity Member, Provider

    @BrianHarrison said:
    They would be a good bet -- kaniini really knows his stuff. However, I can't imagine any company wanting to bring that kind of traffic to their network without a hefty price tag attached. Best of luck to you.

    kaniini left didn't he?

    Cablestreet - London based ISP - Managed Solutions, Carrier Services, Colocation, Dedicated Servers, VMs, and more..

  • @GoodHosting said:
    We're doing that at the moment, still waiting for it to deploy.

    The Centarra website says basic DDoS protection is only 10gbps guaranteed

    Favourite host in general: Ramnode (affiliate link)
    Favourite host for hourly billing/custom ISOs: Vultr ($50 free credit for new accounts, affiliate link)

  • acidpukeacidpuke Member
    edited August 2014

    You might check Exelion they use Centarra network
    State of the art enterprise-grade redundant Anti-DDoS network
    100 gigabits per second and 200 million packets per second mitigation

    http://www.webhostingtalk.com/showthread.php?t=1398936&highlight=exelion

    http://bgp.he.net/dns/exelion.net#_ipinfo

  • StacyStacy Member
    edited August 2014

    CNServers is good, I know a friend that uses Ramnode Seattle DDOS protected IP and it handles attacks > 20Gbps just fine, other DDOS protected Ramnode locations can't do this though.

    My friend uses it as a reverse proxy to a popular minecraft server that gets attacked all the time.

  • @DalekOfSkaro said:
    You totally need blacklotus. But they are not LE* friendly :-) If you want it done right, pay for it. Alternatively, try Firehost.

    BlackLotus doesn't know how to have a working phone line, so it's not my problem. Either way, Centarra is working great so far, and CloudFlare pro blocks most of the DNS angry. I'm working on a deal with Staminus at the moment for a more permanent solution, but a BGP deployments takes up to six weeks with them.

    Acting Director of Albino Geek Services Ltd. My Keybase ID ( gh )
    GoodHosting.co | Enterprise KVM Virtual Private Servers | Twitter / Status : @ GoodHostingCo

  • Awmusic12635Awmusic12635 Member, Provider

    Infinity said: kaniini left didn't he?

    As far as I am aware yes

    Subnet Labs, LLC Contact Us Deploy to: Seattle, Dallas or NYC
    Impact VPS | Cloud Servers | Storage Servers | Impact Shared | Shared Hosting

  • tomsfarmtomsfarm Member
    edited August 2014

    @acidpuke said:
    You might check Exelion they use Centarra network
    State of the art enterprise-grade redundant Anti-DDoS network
    100 gigabits per second and 200 million packets per second mitigation

    http://www.webhostingtalk.com/showthread.php?t=1398936&highlight=exelion

    http://bgp.he.net/dns/exelion.net#_ipinfo

    You could take a look at Voxility or OVH for Mitigating floods as large as the one you are receiving. As they have a Massive Network that is capable of handling large floods without a Problem. Oles has provided proof of this through his twitter. when they successfully migrated 100-200GB NTP Attack against 2 separate clients.

    ClamHost - Affordable Anti-DDoS Hosting Solutions

  • @kaniini left Centarra.

  • MonsteRMonsteR Member
    edited August 2014

    Good luck with DDoS Protection.

    RaptorNode.com - DDoS Protected|VPS|Cloud|Dedicated Servers|Collocation - Los Angeles, CA
    SamuraiBit Security
Sign In or Register to comment.