Solutions for handling ddos attacks?

[Mehrdad Tari]

hello

We provide shared hosting services
Unfortunately, sometimes attacks deny the service to our servers
The operating system firewall or CSF do not have the ability to handle the problem

How can we fix this problem?
We do not have a hardware firewall on the data center for some services
How do we know which domain is affected by ATTAC?

What do big web hosting companies do to Confront with Attak?

thank you in advance

 

[24x7server]

Hi,

There are 2 ways to mitigate the problem through a firewall..
1) Software Firewall : CSF can be used to mitigate it.
2) Hardware Firewall: This is something that you will have to ask your server provider to assist with..
Software firewall has limitation to handle big attacks, but hardware firewall does not..

If you ask what the most of the big providers do, then the answer would be either they do the above solutions or they use CloudFlare for the domains to mitigate the attack.

 

[cPanelMichael]

Hello,

A similar question is found on the following thread:

DOS attack on my site

You may also want to consult with a qualified system administrator to determine how to best mitigate a specific attack. We provide a list of system administration service companies on the following URL should you decide to use one:

System Administration Services | cPanel Forums

Thank you.

 

[postcd]

There are 2 ways to mitigate the problem through a firewall..
1) Software Firewall : CSF can be used to mitigate it.
2) Hardware Firewall: This is something that you will have to ask your server provider to assist with..

Make sure that you have "ipset" package installed by "yum" package manager and enabled in CSF config file:
yum -y install ipset
LF_IPSET="1" (in CSF config file)

and then google: "csf ddos" to find out how to configure CSF

Also another solution to the issue may be to buy ddos protected IP and hide your real cpanel server behind it using GRE tunnel, google: ddos protected IP gre cpanel

Particular websites on cpanel server can also be put behind Cloudflare.com shield