Ddos Attacks On My Website

[newsite12]

Hi.

I have a website that has become very popular and is sat on a hostinglotus VPS setup.

In the past 2 days since we launched, we have had almost 3000 registrations and are getting around 20,000 uniques a day and around 150,000 pageviews daily. This is set to rise fairly quickly. To around 50,000 uniques and around 15 million pageviews per month.

However, because we are so popular, we are attractive to hackers and DDOS attackers, especially from competitors who are very jealous of our instant stardom. Today we have had 2 DDOS attacks, and the site has been forced offline on one occasion.

I am in desperate need of DDOS protection, I want to stay on Thai servers as this is better for us.

Can anyone recommend a good host for dedicated server setup, probably semi managed with direct admin and very good support and good DDOS protection?

We need this very fast and cost is not a problem.

I don't want to go with hostneverdie because they took 6 of my sites offline for 5 days just because the HDD broke, and they said they needed 3 days to wait for a replacement, and considerring they are in BKK, they could have got on the scooter and had a new one in 30 minutes from the local mall. But obviously trying to save 300 baht to use a regular mail delivery provider. i think that is crazy. So I never forgive them for that. I would never put a site of this magnitude on under their control... EVER!

Would need to be English speaking site, or support, and 24 hours support.. I have had a good hunt around, but most options seem to all be in Thai language.

Thanks in advance for any help.

[Paul888]

You need a professional host, and that means don't host in Thailand.

[wantan]

Sounds more like you need a professional host with professional hardware and a personal professional administrator. I doubt that any normal hosting service is able/willing to deal with your DoS attacks 24/7. You will risk a lot of additional trouble i guess. And this "english speaking", "in Thailand",...? Good luck.

[barryw52]

http://www.bangkokhosting.org/ I found this site on the web with a Google search but know nothing about them. Give them a call, there might be other out there.

[innerspace]

My experience - go overseas.

I haven't found a single Thai host that I would even consider using for anything important.

Strong security, 24/7 english speaking support - you are not going to find it here.

Also with your projected high growth have you considered a cloud based system with multiple servers and load balancing?

Would provide better protection against DDOS and easier scalability when you need to grow.

We use rackspace cloud in the UK but they also host in the US. Highly recommended.

[schnazzy]

Depending on the architecture of the site you may be able to split it between here and an international provider that has the equipment that can squelch hobbyist DDoS attacks. So if your site requires authentication, have the externally facing site in the US or elsewhere with a company that has Tipping Points or one of many other brands of devices that can make small time DDoS attacks mute. Note small time would be 10-100khps. You get a DDoS by 'Anonymous' and bummer for you. Then when your users authenticate, the pages etc, are hosted in BKK and local so you get high speed connectivity for local authenticated users. this may be more of a cost than you are hoping for but I hope this helps.

[smiling mantis]

What's wrong with AWS Singapore?

[afp76]

You are running away from the problem and not dealing with it.

What OS do you run? What www-server? Back-end software?

There are plenty of tools and methods to handle DOS-attacks, on all levels.

If you know the type of attacks, you can figure out the best defence.

This includes profiling your site. Find out where the bottle-necks are and optimize them.

If you can, find another simple hosting solution where you can put all your static media such as videos, images etc.

[dmsnsa]

DOS attacks, probes, bots they are all a part of living in the WWW. Whether you host in Off-shore or within the Kingdom it's always going to be something you need to keep on top of. Design, Policies, Monitoring, Updating are just a part of the norm AND YOU CANNOT EXPECT ANYONE ELSE TO DO THE DUE-DILIGENCE. Either hire someone one, or sub it out to a consultant, and in my humble option there is enough decent ones kicking about.

[Crushdepth]

Are you sure its a DDOS and not simply popularity? If your site is running on a VPS then a DDOS should kill it outright and there's not much you can do about it either. If the site survived one then I would guess it's some unexpected publicity, and maybe your VPS just needs more resources. May be worth looking at whether there's anything you can do to optimise the site more too.

[ShopBoy]

Where is the site ?