{"id":3155,"date":"2022-06-27T06:32:00","date_gmt":"2022-06-27T06:32:00","guid":{"rendered":"https:\/\/www.hostinger.com\/blog\/?p=3155"},"modified":"2022-07-30T08:10:34","modified_gmt":"2022-07-30T08:10:34","slug":"how-hostinger-deals-with-ddos-attacks","status":"publish","type":"post","link":"https:\/\/www.hostinger.com\/blog\/how-hostinger-deals-with-ddos-attacks","title":{"rendered":"How Hostinger Deals With DDoS Attacks"},"content":{"rendered":"

How to Recognize a Distributed Denial-of-Service (DDoS) Attack<\/strong> <\/h2>

To avoid an attack, you need to know what’s coming your way. When you spot an attempt to disrupt the regular operation of a targeted server, service, or network by overburdening it with unwanted traffic, you’re dealing with a distributed denial-of-service (DDoS) attack.<\/p>

A DDoS attack<\/a> attempts to deny access to a targeted server by generating a large amount of malicious internet traffic which overwhelms the target’s available resources. We implement traffic filtering solutions to prevent such attacks and guarantee maximum uptime. <\/p>

We’re constantly improving our services and renewing our systems to stay ahead of the game. Today, we’ll detail how we combat DDoS attacks and explain our Wanguard traffic filter setup and overall infrastructure.<\/p>

What Does an Attack Look Like?<\/strong><\/h2>

Here’s a real-life example of a DDoS attack. Picture 400 Mbps of UDP traffic heading to a VPS with an available bandwidth of 100 Mbps. <\/p>

Simple Jekyll website load time results:<\/em>
Before the attack: 0.08 seconds<\/em>
During an attack: 23.35 seconds (1st attempt), 30.86 seconds (2nd attempt)<\/em><\/p>

DDoS attacks are often hard to mitigate because they usually involve whole or multiple botnets targeting you. A botnet consists of many infected systems, so fighting it on your own will, most of the time, prove useless.<\/p>

How We Deal With DDoS Attacks<\/strong><\/h2>

We have two DDoS mitigation solutions for dealing with incoming attacks in our infrastructure – remotely triggered black hole <\/strong>(RTBH) and traffic filtering<\/strong>.<\/p>

RTBH filtering<\/strong> offers a way to eliminate unwanted traffic quickly before it enters our infrastructure. While this method effectively protects our infrastructure as a service provider, it prevents all traffic from hitting us – not something our clients prefer. Eventually, their websites and VPSs become completely unreachable. As a result, the attackers achieve their goals.<\/p>

Traffic filtering<\/strong> is the next-level DDoS protection for our services. It only stops the malicious traffic instead of dropping all of it. Malicious traffic is identified by examining the packets flowing through our infrastructure. The following traffic elements are inspected for specific patterns: <\/p>