Skip to content

how to prevent DDoS attacks ?

Solved Vulnerability
34 2 13.5k 1
  • maybe we should switch to aws, it has a shield for ddos protection…

    https://aws.amazon.com/shield/ddos-attack-protection/

    which provider do you think is best against ddos attacks?

    wrote on last edited by phenomlab
    #16

    @crazycells Hetzner also has excellent DDoS protection, a stateful firewall, and I have a referral link meaning you get credits for free… 🙂

    EDIT: Much of this really depends on where you want your server placed. Hetzner are based in Germany, Helsinki, and now the US 🙂

    https://www.hetzner.com/cloud

  • @crazycells Hetzner also has excellent DDoS protection, a stateful firewall, and I have a referral link meaning you get credits for free… 🙂

    EDIT: Much of this really depends on where you want your server placed. Hetzner are based in Germany, Helsinki, and now the US 🙂

    https://www.hetzner.com/cloud

    wrote on last edited by
    #17

    @phenomlab sure, please send me your link. we were considering aws quite some time, but I will send your link to our developer as well, so he can make decision.

    in general, we were trying to stay away from europe or european products due to strict laws and requirements. our user base is either from the US or from Turkey, so we prefer to decrease the amount of work we do 😄

  • @crazycells Hetzner also has excellent DDoS protection, a stateful firewall, and I have a referral link meaning you get credits for free… 🙂

    EDIT: Much of this really depends on where you want your server placed. Hetzner are based in Germany, Helsinki, and now the US 🙂

    https://www.hetzner.com/cloud

    wrote on last edited by
    #18

    @phenomlab oh I see a link there now, but I believe that is not referral link?

  • @phenomlab sure, please send me your link. we were considering aws quite some time, but I will send your link to our developer as well, so he can make decision.

    in general, we were trying to stay away from europe or european products due to strict laws and requirements. our user base is either from the US or from Turkey, so we prefer to decrease the amount of work we do 😄

    wrote on last edited by phenomlab
    #19

    @crazycells You’d be better placed with Hetzner in the US I think. AWS can get VERY expensive very quickly. My referral link for Hetzner is below.

    I personally use Hetzner and also have a “storage box” with 1Tb of storage for backups located in another datacentre for recovery purposes.

    https://hetzner.cloud/?ref=b2bBQLHF3mEV

  • wrote on last edited by
    #20

    This might also be useful…

    image.png

  • This might also be useful…

    image.png

    wrote on last edited by
    #21

    @phenomlab on a side note, is there any easy way to implement a rule… to allow only two geolocation (countries) but block the access from the rest of the countries?

  • @phenomlab on a side note, is there any easy way to implement a rule… to allow only two geolocation (countries) but block the access from the rest of the countries?

    wrote on last edited by
    #22

    @crazycells yes, but without Cloudflare you’d need to perform more checks to determine traffic origin before you have make a decision as to block or permit.

  • @crazycells yes, but without Cloudflare you’d need to perform more checks to determine traffic origin before you have make a decision as to block or permit.

    wrote on last edited by
    #23

    @phenomlab yes, we are planning to install Cloudflare again…

    We will go with “Pro” version and see how it works, I guess this should help not to have any session errors… Previously, we got many connection problems because of Cloudflare…

  • @phenomlab yes, we are planning to install Cloudflare again…

    We will go with “Pro” version and see how it works, I guess this should help not to have any session errors… Previously, we got many connection problems because of Cloudflare…

    wrote on last edited by
    #24

    @crazycells I wouldn’t be so sure. The pro version of Cloudflare is $20 per month but I don’t think that will resolve the connectivity issues.

    There also the harm that CF causes to SEO if you use their bot fight mode as I mention here

    https://sudonix.org/topic/503/cloudflare-bot-fight-mode-and-google-search

  • @crazycells I wouldn’t be so sure. The pro version of Cloudflare is $20 per month but I don’t think that will resolve the connectivity issues.

    There also the harm that CF causes to SEO if you use their bot fight mode as I mention here

    https://sudonix.org/topic/503/cloudflare-bot-fight-mode-and-google-search

    wrote on last edited by
    #25

    @phenomlab I have a good news. We set up CloudFlare Pro, and did not have connection problems yet.

    As you said, it costs $20/month if you subscribe annually, but we did monthly ($25) since we were not sure if this will work for us. So far everything looks OK. We will also check “Google Search” problem you mentioned as well after we secure our forum. Thanks a lot for this warning!

    Unfortunately, we had no choice about Cloudflare since we were getting more than 1 billion connection request from bots and forum was unusable for several hours two consecutive days…

    Screen Shot 2023-11-15 at 16.49.45.png

    Screen Shot 2023-11-18 at 13.22.28.png

    Screen Shot 2023-11-18 at 13.24.55.png

  • @phenomlab I have a good news. We set up CloudFlare Pro, and did not have connection problems yet.

    As you said, it costs $20/month if you subscribe annually, but we did monthly ($25) since we were not sure if this will work for us. So far everything looks OK. We will also check “Google Search” problem you mentioned as well after we secure our forum. Thanks a lot for this warning!

    Unfortunately, we had no choice about Cloudflare since we were getting more than 1 billion connection request from bots and forum was unusable for several hours two consecutive days…

    Screen Shot 2023-11-15 at 16.49.45.png

    Screen Shot 2023-11-18 at 13.22.28.png

    Screen Shot 2023-11-18 at 13.24.55.png

    wrote on last edited by
    #26

    @crazycells well, of course 1 billion+ requests happened after we installed CF, I do not know how many more we had before installing CF…

  • @phenomlab I have a good news. We set up CloudFlare Pro, and did not have connection problems yet.

    As you said, it costs $20/month if you subscribe annually, but we did monthly ($25) since we were not sure if this will work for us. So far everything looks OK. We will also check “Google Search” problem you mentioned as well after we secure our forum. Thanks a lot for this warning!

    Unfortunately, we had no choice about Cloudflare since we were getting more than 1 billion connection request from bots and forum was unusable for several hours two consecutive days…

    Screen Shot 2023-11-15 at 16.49.45.png

    Screen Shot 2023-11-18 at 13.22.28.png

    Screen Shot 2023-11-18 at 13.24.55.png

    wrote on last edited by
    #27

    @crazycells Good news in the short term, but interested to see if this does impact the SEO of your forum. Do you have Bot Fight Mode enabled in CF?

  • @crazycells Good news in the short term, but interested to see if this does impact the SEO of your forum. Do you have Bot Fight Mode enabled in CF?

    wrote on last edited by crazycells
    #28

    @phenomlab I actually do not know yet, because I have not found these settings on the CF yet…

    Can you please show me how I reach those?

    Screen Shot 2023-11-21 at 16.27.14.png

    and this is the bot page:

    Screen Shot 2023-11-21 at 16.29.47.png

  • @phenomlab I actually do not know yet, because I have not found these settings on the CF yet…

    Can you please show me how I reach those?

    Screen Shot 2023-11-21 at 16.27.14.png

    and this is the bot page:

    Screen Shot 2023-11-21 at 16.29.47.png

    wrote on last edited by
    #29

    @crazycells see the link located at the top right of that screenshot 😂

  • @crazycells see the link located at the top right of that screenshot 😂

    wrote on last edited by
    #30

    @phenomlab lol thanks…

    Mouxy Cotorep GIF

    is it “Verified bots”?

    Screen Shot 2023-11-21 at 16.54.43.png

  • @phenomlab lol thanks…

    Mouxy Cotorep GIF

    is it “Verified bots”?

    Screen Shot 2023-11-21 at 16.54.43.png

    wrote on last edited by
    #31

    @crazycells yes, exactly. You want to allow crawlers such as Google bot etc.

  • @crazycells yes, exactly. You want to allow crawlers such as Google bot etc.

    wrote on last edited by
    #32

    @phenomlab thanks. so, it looks like we are good for now…

    is there any other way to verify independently that indexing works ok?

  • @phenomlab thanks. so, it looks like we are good for now…

    is there any other way to verify independently that indexing works ok?

    wrote on last edited by
    #33

    @crazycells the only accurate way is to use the URL Inspection Tool

    https://support.google.com/webmasters/answer/9012289?hl=en

  • @crazycells the only accurate way is to use the URL Inspection Tool

    https://support.google.com/webmasters/answer/9012289?hl=en

    wrote on last edited by
    #34

    @phenomlab thank you very much, this was helpful. Everything looks ok 🙂

  • crazycells crazycells has marked this topic as solved on

Did this solution help you?
Did you find the suggested solution useful? Support 💗 Sudonix with a coffee ☕
If your organisation needs deeper expertise around infrastructure, security, or technology leadership, learn more about Phenomlab Ltd. Many of the deeper technical guides behind Sudonix are published there.

Related Topics
  • 14 Votes
    17 Posts
    5k Views
    DownPW
    No problem dude ! I hope you have a good vacation. Enjoy your loved ones!
  • nodebb error logs

    Bugs nodebb
    6
    2
    4 Votes
    6 Posts
    2k Views
    ahmed
    I just wanted to ask because I don’t have much knowledge about the new installation. Thank you for the explanatory answer.
  • How to fix size of photos & videos NodeBB

    Solved Customisation nodebb nodebb size
    7
    3 Votes
    7 Posts
    3k Views
    phenomlab
    @crazycells pleasure. Using percentages makes much more sense in this case. It’s the same argument with px vs pt vs em with fonts, margins, padding, etc., in the sense that em is generally preferred over px and pt https://stackoverflow.com/questions/609517/why-em-instead-of-px
  • Plugin reaction Bug

    Solved Customisation plugin nodebb reaction
    15
    1
    0 Votes
    15 Posts
    6k Views
    phenomlab
    @DownPW That was going to be my next suggestion
  • [NodeBB] greeting message

    Solved Customisation css nodebb javascript
    2
    1
    3 Votes
    2 Posts
    2k Views
    phenomlab
    @pwsincd welcome to sudonix, and thanks for the comments. What your looking for is here https://sudonix.com/topic/195/nodebb-welcome-message/3?_=1648295651358
  • NodeBB 1.19.3

    Solved Performance nodebb 1.19.3 performance
    33
    4 Votes
    33 Posts
    16k Views
    DownPW
    @phenomlab I find the problem Mark The error message indicated this path : http://localhost:4567/assets/plugins/nodebb-plugin-emoji/emoji/styles.css?v=6983dobg16u I change the path url on config.json [image: 47bacc80-f141-41e4-a261-3f8d650cc6f6-image.png] And all it’s good Weird, I didn’t have to change that path before 1.19.3 But this does not prevent the problem from a clean install with Emoji Plugin EDIT: After test, that resolv the problem installation for 1.18.x but not for 1.19.x (I have other error message when I run ./nodebb Setup For resume: NodeJS 16_x with 1.18.x is ok
  • Nodebb Hashtag plugin

    Solved General
    15
    1 Votes
    15 Posts
    6k Views
    phenomlab
    @jac Great ! I’ll close this off.
  • NodeBB Design help

    Solved Customisation
    8
    3
    2 Votes
    8 Posts
    4k Views
    phenomlab
    @riekmedia I’ve applied some new CSS to your site. Can you reload the page and try again ? For the record, this is what I added #footer { background: #2d343e; border-top: 4px solid #2d343e; font-size: 0.9em; margin-top: 70px; padding: 80px 0 0; position: relative; clear: both; bottom: 0; left: 0; right: 0; z-index: 1000; margin-left: -15px; margin-right: -338px; } The /categories page seems a bit messed up, so looking at that currently EDIT - issued some override CSS in the CATEGORIES widget <!--- CSS fix for overspill on /categories page - DO NOT DELETE --> <style> #footer { margin-right: -45px; } </style> That should resolve the /categories issue.