Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Advertise on LowEndTalk.com
KVM anti-abuse scripts/software?
New on LowEndTalk? Please Register and read our Community Rules.

KVM anti-abuse scripts/software?

ItsChrisGItsChrisG Member
edited July 2015 in General

Any suggestions for KVM based VPS/VM anti-abuse script/softwares?

Paid is OK too

Thanks!

Email Me: [email protected]
| http://SwiftInternet.de

320TB High Bandwidth Servers on 1Gbps, 2Gbps & 10Gbps! PCCW, NTT, Psychz Network Blend (+Addtl Upstreams Coming!)

Comments

  • If anyones got a custom/private KVM abuse script - I'll pay you for a copy and keep it exclusive just for me - no distribution.

    Email Me: [email protected]
    | http://SwiftInternet.de

    320TB High Bandwidth Servers on 1Gbps, 2Gbps & 10Gbps! PCCW, NTT, Psychz Network Blend (+Addtl Upstreams Coming!)

  • WilliamWilliam Member, Provider
    edited July 2015

    The problem is performance - I have something for DDoS detection (Inbound), IO detection and BW abuse (Outbound) but the redirect over iptables adds considerable load even on high end systems once your combined KVMs use more than ~500Mbit BW and/or high PPS. Second solution via tcpdump scripts is not fully reliable and of questionable legality in EU.

  • wychwych Member
    edited July 2015

    IIRC tom (@TinyTunnel_Tom) has one he was working on?

    Taking a hiatus.

  • Yep, still closed currently ironing out a few bugs,

    Different.

  • gestiondbigestiondbi Member, Provider

    Hardware firewall for Network/SMTP/DDoS and a few homemade scripts for CPU and I/O abuse?

    Gestion DBI Inc. | Leader in IT Consulting and Telecommunications
    A hosting need? Web Hosting | Montreal KVM VPS

  • KihiKihi Member, Provider
    edited July 2015

    @William said:
    The problem is performance - I have something for DDoS detection (Inbound), IO detection and BW abuse (Outbound) but the redirect over iptables adds considerable load even on high end systems once your combined KVMs use more than ~500Mbit BW and/or high PPS. Second solution via tcpdump scripts is not fully reliable and of questionable legality in EU.

    To lessen the load, another thing you can do is limit the BW of the connection via libvirt. Anything over that limit should be detected by whichever anti-ddos / abuse scripts you have.

    ~Charlie.
    For Canadian VPS Hosting, Kihi ain't that bad of a company, it's got CoreOS and Atomic OS'.

Sign In or Register to comment.