Regarding DDOS protection

[cryano22]

Hello, I'm thinking of purchasing a VDS for mumble hosting, and a GRE tunnel to my dedicated server, as I've heard good things about your DDOS protection. However, I have a few questions:

-what is the minimum attack needed to be called a DDOS?

-are small attacks automatically filtered?

The main issue is that the dedicated server has a 100mbps up/down connection, and it would be nice if I could place one of your VDSes in front of the dedicated server, just in case it gets attacked. If the attack is over 50 or so mbps, would you guys take care of it, even if it might not noticeably affect the bandwidth usage? Based on your listing page, your VDSes have 1gbps ports, while my dedicated server only has a 100/100mbps port, and I don't want it to be overwhelmed.

Thanks.

[Edge100x]

-what is the minimum attack needed to be called a DDOS?

For an attack to be a DDoS, it just has to meet the definition of an intent to cause Denial of Service, and be distributed in nature. We talk more about these definitions here: http://www.nfoservers.com/forums/viewto ... =25&t=4931

If your intent in asking this is to determine what types of Denial of Service attacks we consider to be worth filtering, we believe all attacks to be worth filtering and we encourage you to use the Firewall page here to find and filter even small DoSes.

-are small attacks automatically filtered?

It depends. Right now we can't provide details on our automatic mitigation systems beyond what we say in the article, and we can't make guarantees about being able to filter attacks. We are not a host that specializes in DDoS mitigation (and our price point is far lower than it would need to be for us to make that claim); but, some degree of mitigation is a requirement of all hosting now.

The main issue is that the dedicated server has a 100mbps up/down connection...

If you're attracting attacks, I recommend upgrading. All of our dedicated servers here have 1 Gbps connections (and server-grade hardware, and InterNAP bandwidth, service, etc).

it would be nice if I could place one of your VDSes in front of the dedicated server, just in case it gets attacked.

While you could try this, it's not what our service was designed for, and it will lead to additional complexity and higher latencies for you. It would likely be better to run your application directly on a VDS or dedicated server here.

If the attack is over 50 or so mbps, would you guys take care of it, even if it might not noticeably affect the bandwidth usage?

We have systems that will take care of most of the common attack types. The Firewall page and our service quality can help you handle others.