Web Hosting Talk







View Full Version : Dedicated servers for IRC activity


krc
10-24-2002, 12:34 PM
I'm looking for providers that sells dedicated servers for IRC activity AND has resources to fend off bandwidth consuming DoS attacks (not that I am the kind of person who attracts DoS, but we're talking about IRC here). Currently I only know of CIT (httpd.net). Do YOU know of others? I'd appreciate if you'd let me know!

Thank you!

Speckz
10-24-2002, 03:30 PM
Atjeu.com does IRC hosting. You can find details @ http://atjeu.com/irc.html.

Tell them Speckz sent you!

krc
10-24-2002, 03:54 PM
Speckz,

Thanks.

"No guarantee of network uptime or availability," it says. Do you happen to know anything about their ability to withstand large bandwidth consuming DoS attacks?

Do you have a server with them? If you do, could you give me some details regarding network uptime, the quality of the service and so on?

Speckz
10-24-2002, 03:58 PM
I never had a server from them. A friend of mine does or did I think. That is how I learned about them. I will send my friend the URL to this thread. Maybe he will respond himself.

krc
10-24-2002, 04:06 PM
From http://www.webhostingtalk.com/showthread.php?s=&threadid=73216 -

"You should read all the fine print on our irc network page - its totally unguaranteed and unmonitored - we make no attempts to stop ddos attacks or anything - but thats about all can expect for irc hosting - so we just simply devote a small portion of bandwidth to a separate router and let everyone have a free for all, and keep it separate from our network - how much bandwidth they all individually use, we really dont care. If you have any experience with irc hosting then you know why".

This doesn't appeal to me; I'm looking for providers that can offer the same amount of protection against bandwidth consuming DoS attacks as CIT.

DD-SNC
10-24-2002, 04:09 PM
ROFLMAO :emlaugh:

That's not too much of a DDoS firewall then is it?

CIT is your best bet if your looking for IRC related activity, and you know this. Stop holding out.

If the firewall is too expensive, find a reseller. They can usually offer it cheaper (hint, hint).

krc
10-24-2002, 04:13 PM
DD-SNC,

I knew you would respond to this thread. Heh. :)

I do not doubt that CIT is topnotch. However, I'm sure they're not the only one that would sell me a dedicated server for IRC activity AND has the ability to stop large DoS attacks.

exploiter
10-24-2002, 07:34 PM
CIT is all talk and no action when a ddos attacks hits them hard, over the past 1-2 months, they have been knocked off twice due to ddos attacks.. whoever you go with, if they get ddosed, you'll suffer, end of story heh.

clocker1996
10-24-2002, 08:20 PM
cit isn't everything people make it out to be. that's all i have to say about that.

krc
10-24-2002, 08:28 PM
exploiter,

According to Paul himself, CIT has two $200,000 firewalls, each with 32 processors, connected to four OC-12. They can't be *ALL* talk. If you would care to outline what's causing you to say this, I'd really appreciate it! :)

clocker1996,

Could you please outline? I'd love to hear what your experience with them is. Thank you. :)

mushrew
10-24-2002, 08:36 PM
Firewalls won't do sh** when you have malicious individuals who have more DDoS bandwidth than RackShack attack the line. A lot of time CIT null routes your IP if you're being heavily DDoSed, and even if they don't, you still slow down to a crawl as they limit your bandwidth.

krc
10-24-2002, 08:46 PM
mushrew,

Of course I know that (D)DoS can never be fought 100 per cent. All I'm saying is that I have the impression that CIT pretty much is one of the strongest out there. Please correct me if I'm wrong and thereby answer my original question.

exploiter
10-24-2002, 08:53 PM
Originally posted by krc
exploiter,

According to Paul himself, CIT has two $200,000 firewalls, each with 32 processors, connected to four OC-12. They can't be *ALL* talk. If you would care to outline what's causing you to say this, I'd really appreciate it! :)


I was an admin for a warez irc network - 4 of our shells are bought from companys which use CIT.. (we didn't know this till CIT got hit the first time and a few servers spilt off), a few weeks ago, CIT got hit by a big ddos attack, our servers were down for like 4 or so hours.. firewalls can't stop a ddos, nothing will, like I said, all talk.. no action.

mushrew
10-24-2002, 09:04 PM
Well CIT is really the only company of its sort that I know of so they pretty much dominate their niche, which therein lies their problem. Considering the huge majority of true IRCD shell services that use foonet, there must be a TON of DDoS traffic heading into foonet every day. I only consider them a poor choice because they're simply too big and cannot handle all the unwanted traffic. It's not their fault but it's still their flaw. Unfortunately I don't think many companies would like to take part of their niche due to the massive security countermeasures that are required as well as the bandwidth.

krc
10-24-2002, 09:10 PM
Originally posted by exploiter


I was an admin for a warez irc network - 4 of our shells are bought from companys which use CIT.. (we didn't know this till CIT got hit the first time and a few servers spilt off), a few weeks ago, CIT got hit by a big ddos attack, our servers were down for like 4 or so hours.. firewalls can't stop a ddos, nothing will, like I said, all talk.. no action.

Well, of course; as long as the attack is large enough, it can take down almost anything. Many experts claims that a denial of service attack can be mounted against the Internet itself, by attacking major backbones. Take my country as an example: we only have three fibers to the rest of the world, and two of these is in the same ditch!

krc
10-24-2002, 09:12 PM
Originally posted by mushrew
Well CIT is really the only company of its sort that I know of so they pretty much dominate their niche, which therein lies their problem. Considering the huge majority of true IRCD shell services that use foonet, there must be a TON of DDoS traffic heading into foonet every day. I only consider them a poor choice because they're simply too big and cannot handle all the unwanted traffic. It's not their fault but it's still their flaw. Unfortunately I don't think many companies would like to take part of their niche due to the massive security countermeasures that are required as well as the bandwidth.

Good point.

takiman
10-24-2002, 09:17 PM
Originally posted by exploiter


I was an admin for a warez irc network - 4 of our shells are bought from companys which use CIT.. (we didn't know this till CIT got hit the first time and a few servers spilt off), a few weeks ago, CIT got hit by a big ddos attack, our servers were down for like 4 or so hours.. firewalls can't stop a ddos, nothing will, like I said, all talk.. no action.

The time that CIT did go down it was not a DoS. One of the lines got toasted and it was Qwest's fault which affected many of CIT's servers. Unless you own a server on the CIT network you have no right to speak about when things go down or not because some ask for their servers to be limited which would make them down in certain DoS situations. The rest of the servers will be fine. They aren't getting swamped with DoS. They are adding another firewall and improving their filtering capabilities. Before you run your mouth you should contact CIT and they'll be happy to explain anything for you. You can contact them at xerox@foonet.net.

krc
10-24-2002, 09:40 PM
Originally posted by takiman


...because some ask for their servers to be limited which would make them down in certain DoS situations. The rest of the servers will be fine. They aren't getting swamped with DoS...

Please outline what you mean by this.

Originally posted by takiman


They are adding another firewall and improving their filtering capabilities.

Tell me more! :)

takiman
10-25-2002, 12:07 AM
Originally posted by krc


Please outline what you mean by this.



Tell me more! :)

Some shell providers ask to be limited to save on bandwidth costs or ask for their IPs to be null routed faster/slower or ask for different filters. I have a server with CIT and once I asked for it to be capped to save on bandwidth costs so that I wouldnt have to worry about going over the bandwidth limit. I have asked about them adding another firewall and CIT said that they are adding a 3rd firewall and lots more bandwidth. An OC-48 by January infact!

krc
10-25-2002, 04:30 AM
Originally posted by takiman


...CIT said that they are adding a 3rd firewall and lots more bandwidth. An OC-48 by January infact!

Impressive, to say the least. :eek4:

One OC-48 and two OC-12s gives almost 5 gigabits of bandwidth. That's insane. That's insane. That's insane. They verily "need" a third firewall with that much bandwidth available. :eek4:

What I don't understand, however, is how they can afford it. :eek4:

DD-SNC
10-25-2002, 08:42 AM
Originally posted by exploiter
CIT is all talk and no action when a ddos attacks hits them hard, over the past 1-2 months, they have been knocked off twice due to ddos attacks.. whoever you go with, if they get ddosed, you'll suffer, end of story heh.

When did foonet go down?

All of my shell servers have been up for almost 50 days, minus the ones that that died in the early hours of the morning due to a power strip blowing..

If an attack is huge, then it will cause your IP to be automatically null-routed. I rather this happen than the entire network go down, which never has happend.

PLUS, foonet is adding 4 more lines to the shell network and an OC48 from TimeWarner at the end of this year.

If your in a business related to DDoS, you really can't complain when an IP gets null-routed, but you can still SSH to your machine on a different IP, etc.

DD-SNC
10-25-2002, 08:48 AM
Originally posted by krc


Impressive, to say the least. :eek4:

One OC-48 and two OC-12s gives almost 5 gigabits of bandwidth. That's insane. That's insane. That's insane. They verily "need" a third firewall with that much bandwidth available. :eek4:

What I don't understand, however, is how they can afford it. :eek4:

Foonet doesn't just do shells. They have a completely seperated network for web hosting, etc.

Plus, it's not the bandwidth that stops DDoS. It's the firewalls. I've seen FOONET hold 2 gbps ddos without even breaking a sweat. In fact, it was to one of my shell clients probably.

krc
10-25-2002, 09:21 AM
Originally posted by DD-SNC


Plus, it's not the bandwidth that stops DDoS. It's the firewalls. I've seen FOONET hold 2 gbps ddos without even breaking a sweat. In fact, it was to one of my shell clients probably.

Of course the bandwidth doesn't stop bandwidth consuming denial of service attacks. But it doesn't matter how good the firewalls is, if you have a 100 megabit connection and the attack consumes 1 gigabit.

krc
10-25-2002, 09:23 AM
Originally posted by DD-SNC


PLUS, foonet is adding 4 more lines to the shell network and an OC48 from TimeWarner at the end of this year.

Woo! :eek4:

krc
10-25-2002, 12:18 PM
If anyone knows about other providers that can withstand attacks of > 2 gigabits per second, and that sells dedicated servers for IRC activity, please enlighten us. To be honest, I start to doubt if there are others.

DD-SNC
10-25-2002, 04:15 PM
Yeah. Let me know too.

The third firewall will be more user friendly toward gamers and will cover the seperated web network and lower the cost of the firewalling solution for those that want the ultimate DDoS protection. The IRC firewall will be just that.

krc
10-26-2002, 05:21 AM
Perhaps I'm mistaken about this, so correct me if I'm wrong, cyperpal.

To me it seems like CIT doesn't take abuse very serious. I do not have any evidence for this assertion, SO PLEASE TAKE MY WORDS LIGHTLY. All I'm saying is that I have gotten the impression that they let the money they earn on questionable "companies" weigh more than some abuse here and there. I'm talking especially about some of the more decayed shell companies hosted there.

This is bad for everybody, because everyone that has experience with IRC and shell hosting knows that for the most part it's abusive users that attracts (D)DoS attacks from cretins here and there. Personally I've wasted time on IRC for years, and I've never had any problems - at all.

zerphyte
10-26-2002, 08:07 PM
I may know of a solution for irc hosting. What is the price range you are looking at?

krc
10-27-2002, 03:31 AM
Originally posted by zerphyte
I may know of a solution for irc hosting. What is the price range you are looking at?

Naturally, it depends on the kind of service I'm purchasing. For IRC activity, strong (D)DoS protection is vital. I know that CIT, say, is able to withstand bandwidth consuming attacks in the range of > 2 gigabytes per second, and they specialise in protecting vulnerable activities (like IRC) from these attacks.

Not only is this important to protect the customers. If i had a dedicated server with RackShack and recieved a large bandwidth consuming attack, they would throw me out before I could say, "I should've known better". To keep my customers I need a provider I can stay with.

That said, I would do anything in my power to minimize the danger; I wouldn't let abusive users stay just because I had great protection.

Regarding the price, I really can't say much before I know what the deal is.

SG.GS
10-27-2002, 08:02 AM
I'm interested too. Any providers?

krc: Are you using any existing providers now?

BMurtagh
10-27-2002, 11:12 AM
Originally posted by krc

To keep my customers I need a provider I can stay with.


irc has customers?

krc
10-27-2002, 02:41 PM
SG.GS,

Not in the sense of public provider available for everyone, no.

LogicBrendan,

We're talking about selling UNIX accounts for IRC related activity.

zerphyte
10-27-2002, 04:04 PM
If this was in the requests forum I would be able to respond that I can provide something for around $500/monthly equal to foonet. But that would be wrong in this forum.

krc
10-28-2002, 10:55 AM
zerphyte,

If this was the request forum I would thank you for the offer and ask you to PM me details about the dedicated server (and options), network, bandwidth and other useful information. Then I would say, "I'm looking forward to hearing from you soon!"

:)