# Thread: How a ddos effects a server?

1. Newbie
Join Date
Nov 2009
Posts
21

## How a ddos effects a server?

I would like to know a little about how a ddos attack effects servers and connections.

An example: The attacker has 1000 victims in their botnet. Each victim has an upload speed of 2Mbps and the attack starts a UDP attack.

About how many Gbps or Mbps will this attack in total have? I believe the upload speed from each victim's connection will be used to send the attack. Am I right? Would the math work just by multiplying: 2Mbps x 1000 victims = 2Gbps?

2. Web Hosting Guru
Join Date
Oct 2006
Posts
303
hello , yes 2Mbps x 1000 victims = 2Gbps? you are right however if they ddos you with 2 gbps , your server will gone crashing or offline long time before all 2gbps hit you .

3. WebHosting Master
Join Date
Dec 2006
Posts
4,149
Originally Posted by Budor76
I would like to know a little about how a ddos attack effects servers and connections.

An example: The attacker has 1000 victims in their botnet. Each victim has an upload speed of 2Mbps and the attack starts a UDP attack.

About how many Gbps or Mbps will this attack in total have? I believe the upload speed from each victim's connection will be used to send the attack. Am I right? Would the math work just by multiplying: 2Mbps x 1000 victims = 2Gbps?

2.) Bandwidth is not the only subject at play. Your server would be unable to respond due to CPU/RAM/Disk constraints before the attack were to reach 2Gbps.

4. Web Hosting Master
Join Date
Oct 2002
Location
Vancouver, B.C.
Posts
2,654
Originally Posted by Budor76
I would like to know a little about how a ddos attack effects servers and connections.

An example: The attacker has 1000 victims in their botnet. Each victim has an upload speed of 2Mbps and the attack starts a UDP attack.

About how many Gbps or Mbps will this attack in total have? I believe the upload speed from each victim's connection will be used to send the attack. Am I right? Would the math work just by multiplying: 2Mbps x 1000 victims = 2Gbps?
Most DDoS attacks overwhelm you with packets/s rather than Mbps, which is what you really need to look at. Since 10Mbps ethernet can do ~14.4Kpps, let's presume 2Mbps is ~3Kpps. 3Mpps is enough for any regular provider to null route you, as gigabit can only do 1.44Mpps max, and any more than that will cause switch buffering issues, affecting other customers, if the traffic isn't dropped before it gets to your server.

Now, in most real life situations, most bots won't use their full network capacity against you. Botnet masters try to escape detection, so each bot will likely only send you a small amount of traffic, so you wouldn't see anywhere near 2Gbps or 3Mpps with just 1000 of them. On the other hand, with HTTP GET floods, they won't need to do that much traffic to take your site down. Just 10 - 20,000 requests/s will usually bring a typical web server to its knees, and it's easy enough for each bot to send 10 - 20 requests/s.

If you have reason to suspect your site is being targeted, using a DDoS specialized hosting provider with specialized DDoS mitigation hardware is your only chance at withstanding any sizable attack.

5. Web Hosting Guru
Join Date
Apr 2011
Location
Philippines
Posts
301
As far as I know, the effects of the attack on servers are temporary only but it can be very inconvenient.

#### Posting Permissions

• You may not post new threads
• You may not post replies
• You may not post attachments
• You may not edit your posts
•