Web Hosting Talk : Web Hosting Main Forums : Web Hosting : Setting a server at home + adding own DDOS protection

[mmm6]

Hi,

I am pretty new at this but intend to hire someone to setup a server at my house. I will communicate with my isp in order to get a permanent IP. The reason I am doing this is I get too frustrated beings ddos'ed and even gigenet proxyshield cannot help me becuase of DMCA and other things.

Once I will have my server up and runnings, do you think it is possible to setup a ddos protection software/hardware ? If it's possible, do you have recommendation/lead for me so I can start looking at ?

Many thanks to all wishing to give a nb a startup.

[cristibighea]

What do you mean "because of DMCA and other things"? Are you hosting something illegal?

Also, I highly doubt at your home you have the redundancy of a datacenter, with multiple ISPs on your backbone, power backups, redundant cooling and so on. Your home connection will probably have a few mbps of upload which is pretty small and a DDoS will knock it over really quick, even with DDoS protection equipment.

[ldcdc]

If gigenet can't fight the DDoS, I you don't stand any kind of change with a server at home.

[mmm6]

Originally Posted by ldcdc

If gigenet can't fight the DDoS, I you don't stand any kind of change with a server at home.

Hi,

Gigenet can fight the ddos easily. Except my competitor kep sending them DMCA letter (fake letter, I can prove it) but gigenet is not willing to listen to us...

[mmm6]

Originally Posted by cristibighea

What do you mean "because of DMCA and other things"? Are you hosting something illegal?

Also, I highly doubt at your home you have the redundancy of a datacenter, with multiple ISPs on your backbone, power backups, redundant cooling and so on. Your home connection will probably have a few mbps of upload which is pretty small and a DDoS will knock it over really quick, even with DDoS protection equipment.

Hi,

My site is receiving about 1 gig of transfer per day, may be 1000 client. Not much. Do I really need all of the above you mentionned ?

Thanks

[DWS2006]

The thing to remember when hosting a server at home is the limited upload bandwidth of most ISP providers. Your internet connection may seem lightning fast (with 10mbits to 15mbits download speeds), but your upload speeds will most often never reach more than 2 - 3 mbits per second peak. That is very, very low. There is typically more latency with ISP upload connections than those provided by a DC also. The result, even a few concurrent visitors could severely impact performance.

If DDOS is a problem for you at a DC, it will be an even bigger problem at home. ISPs are often even more sensitive about their IP usage than DCs, you'll get null routed quickly if your experiencing DDOS.

These are just things to concider. It may be best to work on finding and eliminating the cause of the DDOS attacks.

[mmm6]

Originally Posted by whultra

The thing to remember when hosting a server at home is the limited upload bandwidth of most ISP providers. Your internet connection may seem lightning fast (with 10mbits to 15mbits download speeds), but your upload speeds will most often never reach more than 2 - 3 mbits per second peak. That is very, very low. There is typically more latency with ISP upload connections than those provided by a DC also. The result, even a few concurrent visitors could severely impact performance.

If DDOS is a problem for you at a DC, it will be an even bigger problem at home. ISPs are often even more sensitive about their IP usage than DCs, you'll get null routed quickly if your experiencing DDOS.

These are just things to concider. It may be best to work on finding and eliminating the cause of the DDOS attacks.

Hi,

I spoke with my ISP and they have a dedicated line for my house, wich cost 800$ per month. That is what I wanted. However, I am just afraid of how to handle the DDOS. I don't mind buying software, firewall etc etc etc but I need to know what to buy and even pay monthly...

[cristibighea]

It will cost quite a bit to get a dedicated firewall from the likes of Juniper or Cisco, not to mention someone to properly configure them. If you have the money, you'll probably end up cheaper working with a datacenter to get everything you need by either colocating or renting a dedicated server.

[DWS2006]

Originally Posted by mmm6

Hi,

I spoke with my ISP and they have a dedicated line for my house, wich cost 800$ per month. That is what I wanted. However, I am just afraid of how to handle the DDOS. I don't mind buying software, firewall etc etc etc but I need to know what to buy and even pay monthly...

Ok. When most users post here about setting up a server at home, they intend to use a standard RR/ComCast type home ISP connection. Since your looking at a dedicated line, bandwidth shouldn't be an issue.

[ameen]

Originally Posted by mmm6

Hi,

Gigenet can fight the ddos easily. Except my competitor kep sending them DMCA letter (fake letter, I can prove it) but gigenet is not willing to listen to us...

I have an idea of which site you are referring too, i'm quite confident if i am correct the dmca is not fake. Anyhow feel free to PM me if its a different site i will look into it further for you.

[MikeDVB]

Ah, it's nice to see GigeNet respond to this.

Personally, even if you have a dedicated line to your house and all of the firewall hardware you can afford, it's still not going to keep you online. They will fill your dedicated line with garbage and even though none of it is making it to your server (being filtered by the firewall) your pipe will still be overwhelmed.

[Nex7]

I am unaware of any connection you could get for $800/month that will not be destroyed by a DDoS, mitigation equipment or no. And it is very likely your ISP will see the activity and simply nullroute your IP in either event.

[mmm6]

So basically,

You are saying it is IMPOSSIBLE to have a private server at home for my need right ? I know that a 20mb mitigation channel is enought to stop the ddos...

[cristibighea]

A 20mbps channel might be cool if you're getting attacks that low, but I see attacks usually going upwards of 300mbps, though they can be smaller or much higher too. It comes down to whether you really need to have the server at your house or benefit from the quality of a datacenter.

[Nex7]

Yeah I rarely hear about a DDoS that low. If its going at 20mbit and you take care of it, whoever is doing it can likely get it bumped up to 200 and you're out.

Point is, big datacenters have potentially dozens of gig-e connections to various providers. For $800, you're going to have under 1 gig-e, to 1 place.

Also - if you think Gigenet or some other large provider is being too hasty with a DMCA notice, wait until you see what your ISP does when it gets one.