Web Hosting Talk : Web Hosting Main Forums : Dedicated Server : ddos and null ip

[ttgt]

Hi,

for most dedicated provider,if the server under ddos,
will they nullroute the ip ?
if yes,how long will they let the ip be back ?

because for shared hosting server,
there are alot site on the server with the ip,
if the ip is been nullrouted,
it is hard to change all the site to other ip quickly and let the sites be back,

do you have any experience or suggestion with it ?

thanx

[zFastDan]

You're best contacting the provider, and asking. It depends on process they take to migrate the attack.

Some will attempt to filter smaller attacks, where some will null route.

Transferring to a different IP isn't a major task.

[Rob Hivelocity]

Once the attack ceases providers will normally un-null an IP. I am not sure of your companies process in this regard, but I can assure you they want to be rid of it as quickly as you do. I would strongly suggest speaking to them directly in order to find out what your options are.

[ttgt]

but usually,how can provider think it as ddos or not ?

[Deroba]

Depends on the size of the attack, but if you constantly get large attacks you should look into DDoS protected hosting of datacenters who offer basic protection and won't simply null-route you.

[BalticServers Andrius]

Originally Posted by ttgt

but usually,how can provider think it as ddos or not ?

Bandwidth and packets increases quickly to server.

Simple.

[ttgt]

Originally Posted by Deroba

Depends on the size of the attack, but if you constantly get large attacks you should look into DDoS protected hosting of datacenters who offer basic protection and won't simply null-route you.

do you mean they will have some machine to filter the ddos attack out and let the normal connection to work well ? thanx

[ttgt]

Originally Posted by BalticServers Andrius

Bandwidth and packets increases quickly to server.

Simple.

does any relationship between bandwidth,packages and session ? thanx

[Deroba]

Originally Posted by ttgt

do you mean they will have some machine to filter the ddos attack out and let the normal connection to work well ? thanx

Yes, take for example Awknet which offers DDoS protection. And advanced filters add-on, etc.

Of course, the price is not cheap.