MWZ

To be honest, they don't have 1 Tb protection, this is just a "marketing trick", as their protection provider is voxility and they're just reselling their vps'es out of this, also voxility can barely deliver 10% of what they offer, which is 500 Gbps (this is their total capacity, but not how much they'll handle for a single customer in a single IP), be careful with the "merchandising" behind these numbers, they are like that exactly to attract people seeking for the "cheapest things" at the "biggest advantages". ;) And no, I didn't said it doesn't work, it will work for these 5~10 $ booters people like to pay and throw towards your stuff... Although, it's known they have a packet loss / lag, under heavy stress.

There are many alternatives in the market, keep searching and eventually you'll find one that satisfy your needs. :)

OVH false positive rate is ridiculous when you hit it with a syn flood (many people complain to not be able to connect), also most small custom coded attack scripts will work there, and no, they do not have a proper layer 7 protection and you can overload many tcp applications relatively easy with large zombie/pc botnets. :) But... if all of this is not critical for you, yeah, use fail 2 ban, iptables, bla bla bla and as much as many workarounds you want. Afterall, probably for the price they are charging, this is more than enough for who can only afford it...

Did you give the coffee to the concierge already ? It's time again.

As I thought, again you cannot answer anything, that's enough. Get back to your concierge and give his coffee, since the time has come again.

(Still evading everything, but sure, keep going, people reading are having fun). Ok. Mr. Datacenter Boy, lets wait you to answer a few "trivial questions" for someone working @ UK Facility of Voxility. 1) What is the power grid type in UK voxility is using in its datacenter ? 2) What is the modality power model you acquire over there ? 3) What is the technology used in the inner fiber connection at the routing core ? Which wave colors are you using (Mind to tell the codes please ?) 4) Which are the transport companies you are working with ? At which milleage ? 5) What is the current power scheme of the current datacenter you are ? :) Now please, if you can't answer these questions, just get out of here, because you are a complete loser just trying to be something you aren't. Ok, Ok, I understand, you don't know any of this, because your job is probably to give coffee to the concierge at the entrance, lol. Good night.

Nobody is destroying anything, except a few ignorant people feeding him with wrong informations, aside from this, everything is fine.

You can, when you notice that he doesn't have any idea/clue of what he is talking about. I can tell if you are a developer or not, by just discussing about development with you, if you get lost during the discussion, then either you are a really bad developer or you aren't one at all. The same apply to all his statements going into the wrong direction without proper argumentation or valid proofs (with information available on internet for everyone check, even him, before saying anything). Regarding the location you may potentially work or not, that doesn't really matter, because first, what matters here, is if you know anything about development or not itself, later on, if necessary we can discuss if you work somewhere or not, the whole point here, is that he doesn't have any clue about networking at all, doesn't matter where he possibly works or not, that's not significative at all.

As I thought your argumentation was empty, and you cannot even proof your poor statement, good job. :) You are just stupid, and seriously lack some brain. Not going to waste time anymore, anyone that does really works with networking (not you of course, as you don't even know what I'm speaking about) and knows how an AS works will understand how dumb you are. :) :) Good luck with your total blind ignorance. O0 PS: The only system you manage, is the mouse and keyboard in front of you and the remote control of your TV. (Mr. Datacenter Boy).

You are just lying. And you doesn't even know what AS peering is, are you really this naive ? lol. Please, check the sources first, check the RIR first (RIPE/ARIN and so on), don't say random things like that please. You've just proofed how you are a complete rookie in all this, you don't work for voxility at all, you are working only for your stupid mind. This made me laugh the whole day, a guy that cannot even check official sources to know what is happening first, before making a lot of wrong statements, please go back to school and stop lying you work for a datacenter, because this was the most basic mistake on earth you could do here. And the most fun thing here, is that you keep evading the subjects making additional wrong statements to justify your previous wrong statements, your major error here is, there are people that know more than you so while you feed newbies in this forum that doesn't even have a clue of what is happening, there are people that surely knows and indeed you aren't one of them, but just part of the mass here. I've proofed what I said here, and "anyone" in this forum, can query the RIRs the same way I did and check exactly what is going on. Then, can "you" proof what you've said at all ? No, you can't, because there isn't anything to be proofed, other than just you stating something that isn't the reality here.

HyperFilter is not voxility reseller, they have their own network with their own telecom carriers, you can even check that through simple bgp queries, only newbies would say something like that, when they do not have any "AS" relationship with voxility at all. Also, you can even ask voxility yourself if they are their customers or not and the answer is clear and positive, they are not. :) I don't see voxility in their peering relationship at all, but only real carriers, such as : Cogent, NTT, KPN and so on. :) remarks: Transit Providers (Pref=100) remarks: remarks: COGENT import: from AS174 action pref=100; accept ANY export: to AS174 announce AS60503 remarks: KPN import: from AS286 action pref=100; accept ANY export: to AS286 announce AS60503 remarks: NTT import: from AS2914 action pref=100; accept ANY export: to AS2914 announce AS60503 remarks: SEABONE import: from AS6762 action pref=100; accept ANY export: to AS6762 announce AS60503 remarks: HE import: from AS6939 action pref=100; accept ANY export: to AS6939 announce AS60503 remarks: ZAYO import: from AS6461 action pref=100; accept ANY export: to AS6461 announce AS60503 remarks: GTT import: from AS3257 action pref=100; accept ANY export: to AS3257 announce AS60503 remarks: EDPNET import: from AS9031 action pref=100; accept ANY export: to AS9031 announce AS60503 remarks: KAIA GLOBAL import: from AS33926 action pref=100; accept ANY export: to AS33926 announce AS60503 PS: (You could have checked this first, before even making wrong statements, but whatever lol). Also they are providing IP connectivity to a few datacenters in Europe, keeping them protected. (Via DE-CIX / AMS-IX and NLIX). Don't expect any "voxility resellers" capable of doing this, because this will not happen. :)

Sure, whatever you do, as long you don't use services located in different infrastructures (where a ddos protection could exist, causing a conflict or issue, like the one you have), you will at least, avoid these troubles.

You should move from OVH, their antiddos system is causing the problem you have. Or you can host your MSSQL Server in any other datacenter, that does not have DDoS Protection. This way you avoid 100% this issue. Or lastly, you can simply use HyperFilter Dedicated Server, and then everything will be "local", much better, faster and safe for you as well.

I don't think so, their website is not even online since the first day... Probably any other as the site is still online. (He said that above, as his issue was only related with remote sql connection not working properly).

Do you host in OVH ? If so that's the reason... They often block webhosting IPs disallowing them to connect to their network (if your SQL Server is in OVH, this is the issue you have).

It won't be, it will reduce the resource usage, but it can still be knocked down... We aren't speaking about nix systems here unfortunately hehe.

Sad hehe.

Does it even exists for Interlude ? Because I've never found it...

He said it is an old project at his first post, but the english is very bad, so... yeah :P

I never said it was 'bad', however it has problems, but you can't expect a perfect solution when they have to take care of 160k+ servers in their network... They need to have a generic solution that will try to cover the most customers possible and this is where specific providers, focused only in DDoS Mitigation will be better, not speaking about HyperFilter only, BlackLotus is also an alternative, but if people complain about HyperFilter price, they will complain even more about BlackLotus pricing haha... I forgot to mention Prolexic and Akamai :), if you have the budget, yeah, go with them :) !

Not when you use their Dedicated Servers / Colocation or IP Transit, but yes, in fact any proxy service will have that characteristic :)

There are at least 5 guys in this thread, which used HyperFilter when you said nobody used it. You didn't showed any technical argumentation behind starting a war of "What's better to use". All I see is you raging around to defend your cheap server :). Oh yeah, maybe that's because you are mad when your l2 server failed ? Oh, sorry, this was your brothers server right ? Sure :P

You are comparing water with wine, if for you both are the same, then just drink water. PS: You might start paying attention in the facts, because I did not mention HyperFilter a single time in this topic (except by now), and you are aggressive about that all the time :), maybe you are getting too neurotic about that, so, relax boy :)

The lag is caused by three reasons : 1) Your server is not handling part of the attack (pretty normal). 2) You are in VAC and now your server is protected, but, other customers are using too much bandwidth in the VAC, so now you have lag/latency. 3) The VAC you are in, is too far from your location. (Yes, OVH have 3 VACs and when one of them is overloaded, they will redirect your traffic to another VAC). In fact, what OVH want is that customers under attack, get isolated from the customers which are not under attack, so even if they lose a single customer, it is better than losing a whole rack full of servers :)

Up to a certain limit my friend :), get 6~8 booter accounts and your tip will fail, the reason for this ? Easy, a regular server have an I/O limit of 300~400k IOPS, with 6~8 regular booter accounts, you will be at 1000~1200k IOPS and you will keep causing issues (even if you do the tunning you've mention). So yes, it might work when people attack you with a simple booter for 30 seconds, but no this is not a real solution, because the server can only handle the attacks up to a certain limit :)