OVH Community, your new community space.

Protection against attacks


makno
07-10-2010, 19:37
or maybe that link was a suggestion for those who have fallen victims of the ovh "tests"... go figure

RapidSpeeds
05-10-2010, 13:40
Quote Originally Posted by Neil
Concrete example, the site
http://www.hadopi.fr that is not hosted by OVH and is down due to attacks, we could very well order an IP firewall to protect against attacks
without having to move at OVH. Such protection activated in 5 minutes ... Simple, fast and very effective.
That would be ironic if OVH were to host hadopi..

marks
05-10-2010, 12:15
Quote Originally Posted by LawsHosting
Is this for OVH's shared hosting only, or will it be slowly rolled out to more services, if so, how much extra will it be (obviously, nothing is for free these days).....
yes, the idea is that eventually, this service would be available even if your hosting is not at OVH. That is, to be put in front of any other IP. So, yes.

We don't know yet about the price. We'll update it ASAP

LawsHosting
04-10-2010, 13:44
Is this for OVH's shared hosting only, or will it be slowly rolled out to more services, if so, how much extra will it be (obviously, nothing is for free these days).....

Neil
04-10-2010, 11:36
Hello,

This week we started the migration system of shared hosting to load balancing new infrastructure. For now we have just done the 1000gp which was a migrated success. The other plans will be migrated in the week.

In addition to the new system load balancing, we test a system to protect against attacks.It is located upstream of the load distribution and allows
block all packets embryonic (Synflood) and better manage the timeout on the real connections. All this avoid congestion due to DDoS. Thus, any purge
is upstream of the load distribution which sees that the real connections.

Funny thing (if you will) that this morning is 1000gp IP was gently attacked by 1200 from around the world, creating more than 15,000 simultaneous connections.

Session # sh ipv4 dest-port 6969 | i Total Sessions
Total Sessions: 15,704

The protection operation and we see no impact on the service:

Session # sh ipv4 dest-port 80 | i Total Sessions
Total Sessions: 1405

We will continue test the protection system against attacks. The goal is to provide Protection against attacks without requiring you to change your infrastructure. OVH and can provide an IP firewall which is going to take the attack, we will serve the bad packets and return you to the right packets
IP of your dedicated server. And this even if you do not have a server at OVH. To get the protections you do not do anything except change in the DNS
A field ... and that's it. Concrete example, the site
http://www.hadopi.fr that is not hosted by OVH and is down due to attacks, we could very well order an IP firewall to protect against attacks
without having to move at OVH. Such protection activated in 5 minutes ... Simple, fast and very effective.

Reagrds
Octave