Nulled
15-06-2016, 10:36
Do not rely alone on the DDos Protection that OVH provides, if you are really worried about the server, I recommend to add rulings to it & order a TCP Proxy.
Looking for a dedicated game server
alvaroag
08-06-2016, 01:29
They may not be able to DDOS your server, at most a few seconds until the AntiDDOS starts to filter all your traffic, in order to mitigate the DDOS attack.
But the AntiDDOS protects only against network attacks, like SYN flood and many other common attacks, all of them at network level. If your application has some vulnerability, the no AntiDDOS solution will do anything for it.
For example, imagine your server app has an error which went unnoticed by the developers, and it always allocates a fixed size buffer to hold some data received by the game client. Under normal circumstances, the game client would not send larger data, so there should be no problem. However, a malicious person can send forged data to the server, in order to exploit that error, which can cause, in the best case, the force close of the server app.
That's just an example, of course; there are a lot of attacks that an application can be vulnerable to. Many popular web applications are vulnerable to SQL injection attacks, which are caused by the inclusion of non-escaped data into SQL queries.
But the AntiDDOS protects only against network attacks, like SYN flood and many other common attacks, all of them at network level. If your application has some vulnerability, the no AntiDDOS solution will do anything for it.
For example, imagine your server app has an error which went unnoticed by the developers, and it always allocates a fixed size buffer to hold some data received by the game client. Under normal circumstances, the game client would not send larger data, so there should be no problem. However, a malicious person can send forged data to the server, in order to exploit that error, which can cause, in the best case, the force close of the server app.
That's just an example, of course; there are a lot of attacks that an application can be vulnerable to. Many popular web applications are vulnerable to SQL injection attacks, which are caused by the inclusion of non-escaped data into SQL queries.
tonakis2108
07-06-2016, 19:48
Originally Posted by alvaroag
Can someone DDos my game server? Is that what you mean about application level attacks?
alvaroag
07-06-2016, 03:36
Just a remark: The OVH AntiDDOS is not configurable, it just monitors and filters traffic before it gets to your server. What you have to configure is your server, to maximize it's security. The AntiDDOS does not guarantees full security on your server, it just protects it against some network level attacks. Application level attacks are your responsibility.
tonakis2108
06-06-2016, 23:38
So to prevent an attack on my servers I cannot just rely on the DDos protection offered but I will need to set it up as well, correct?
Thanks for the response, it helps a lot.
Thanks for the response, it helps a lot.
alvaroag
06-06-2016, 17:41
Hi. In your case, the Game AntiDDOS would not make much different, as it's specially tuned for listed games & apps. So you can freely choose any server model according to your need, without worrying about the AntiDDOS: All the servers have standard AntiDDOS included.
Extra protection.... OVH AntiDDOS should protect your server against most common attacks. But, of course, that does not makes all the job: You must set up a firewall on your server(software firewall), and tune your security configuration. You can pay OVH to add a Cisco Firewall for your server; depending on how you configure it, it could significantly enhance your server's protection.
Other important fact, as you are developing your own server app: No AntiDDOS or firewall will protect your server against app vulnerabilities, so be sure to test your app a lot against software attacks(like code injection, buffer overflow, etc), as some of them can take down your app with almost no effort. Using some type of privilege isolation(UAC in Windows, SELinux or AppArmor in Linux) can also help to prevent such attacks to penetrate further into your server.
Extra protection.... OVH AntiDDOS should protect your server against most common attacks. But, of course, that does not makes all the job: You must set up a firewall on your server(software firewall), and tune your security configuration. You can pay OVH to add a Cisco Firewall for your server; depending on how you configure it, it could significantly enhance your server's protection.
Other important fact, as you are developing your own server app: No AntiDDOS or firewall will protect your server against app vulnerabilities, so be sure to test your app a lot against software attacks(like code injection, buffer overflow, etc), as some of them can take down your app with almost no effort. Using some type of privilege isolation(UAC in Windows, SELinux or AppArmor in Linux) can also help to prevent such attacks to penetrate further into your server.
tonakis2108
06-06-2016, 15:14
Since, I've been a customer of OVH I decided with my team that we want to host our game server project but then the questions came dropping.
Since we are working on it and it does take a lot of work to code everything in place we want to be sure our code or project will be up and running without any abnormalities. The game server isn't Minecraft, counter strike or team fortress it's a different game alltogether non listed in your DDos game protection. This is an urgent question thread and we would love to see a reply answering our inquiries.
So say there's a DDos attack on our server can it do any damage, can it slow me down can it touch me in general?
Second question, is there a protection against such an attack and how much can your DDos protection, protect me?
And if no, do I have to buy extra protection?
Since we are working on it and it does take a lot of work to code everything in place we want to be sure our code or project will be up and running without any abnormalities. The game server isn't Minecraft, counter strike or team fortress it's a different game alltogether non listed in your DDos game protection. This is an urgent question thread and we would love to see a reply answering our inquiries.
So say there's a DDos attack on our server can it do any damage, can it slow me down can it touch me in general?
Second question, is there a protection against such an attack and how much can your DDos protection, protect me?
And if no, do I have to buy extra protection?