servmap
10-24-2007, 01:33 AM
Hi,
My provider's dns server got ddos attacked, causing our main site inaccessible. It's not a direct attack on our site. But we can't access our support ticket or billing system.
I've emailed my customers to contact temporary support email address hosted elsewhere if they need support request.
What do you do when you get this event? Do you provide a load balanced ticket/billing system
Host your website in another DC? Another server at the very least.
zacharooni
10-24-2007, 01:49 AM
If possible, or email them a backup one in the event that the host goes down. Try to make it IP only so that it doesn't depend on DNS. :)
MACscr
10-24-2007, 02:03 AM
You should also have failover dns setup so that you can easily switch to another server or even just regular hosting account in the case of a failure. You dont even have to sync files. Just at the very least, have contact information and explanation of the situation. Customers will appreciate it and only costs $20 a year plus hosting service
servmap
10-24-2007, 02:31 AM
setting up a backup site has crossed my mind, but I'm still considering to sync the files/db or not.
Host your website in another DC? Another server at the very least.My customers sites are on different servers, and some on different DC and they're not affected by the event.
thx god my site is now back online
plumsauce
10-24-2007, 04:03 AM
Since it was specifically the OP's upstream dns provider, perhaps the solution is to go with a specialist third party dns provider.
bluerocket
10-24-2007, 04:09 AM
It depends, if uptime is important and they don't have DOS systems in place - leave quickly, leave very quickly.
~ServerPoint~
10-24-2007, 04:43 AM
As someone said in other thread today - the best way - have some places for backups and keep in mingв few companies to move if your main provider is DDosed.
But as rule if you apologize to your customers and give them few days for free - it will be ok.
servmap
10-24-2007, 05:47 AM
It was originally an attack on my provider's dns server, but multiple server on the same VLAN stop responding to the network traffic.
I got my dns hosted elsewhere, clustered. As mentioned above, none of my customer's sites affected by the event, only my site. I have the main site on a vps.
Jay Suds
10-24-2007, 11:28 PM
It was originally an attack on my provider's dns server, but multiple server on the same VLAN stop responding to the network traffic.
I got my dns hosted elsewhere, clustered. As mentioned above, none of my customer's sites affected by the event, only my site. I have the main site on a vps.
That sounds a little odd ... it sounds like your provider didn't do a very good job mitigating the attack and that they are also potentially running crummy networking gear, because an attack against a specific IP shouldn't take down other servers in the same VLAN. Even so, if it was a DNS attack, the obvious solutions as others have noted is to outsource your DNS to a company that specializes in DNS hosting.
IRCCo Jeff
10-27-2007, 11:16 PM
We use Ubersmith hosted to keep support seperate from any internal networks.
forsalehost_
10-30-2007, 07:12 AM
Hi,
My provider's dns server got ddos attacked, causing our main site inaccessible. It's not a direct attack on our site. But we can't access our support ticket or billing system.
I've emailed my customers to contact temporary support email address hosted elsewhere if they need support request.
What do you do when you get this event? Do you provide a load balanced ticket/billing system
You can use DNS servers at your registrar and point "A" records to Ip address of your provider.