{"id":49292,"date":"2022-07-15T18:29:31","date_gmt":"2022-07-15T15:29:31","guid":{"rendered":"https:\/\/tuthost.ua\/service\/protection-against-ddos-attacks\/"},"modified":"2024-07-24T14:40:20","modified_gmt":"2024-07-24T11:40:20","slug":"ddos-protection","status":"publish","type":"page","link":"https:\/\/tuthost.ua\/en\/service\/ddos-protection\/","title":{"rendered":"Protection against DDoS attacks"},"content":{"rendered":"
\n\n

Protection against DDoS attacks<\/strong><\/h1>\n\n<\/div><\/div>
\n\n

DDoS attacks have become one of the most widespread cyber threats in recent years.\nWith their help, attackers can completely paralyze a web resource, shutting down access for users for an indefinite period of time.\nFor online businesses, financial companies and web portals of public services, this can be very painful.\nIn addition, the trust of customers who cannot access the site falls, losing the ability to safely perform financial transactions or other actions that require confidentiality, which undermines the reputation of the resource. <\/p>\n\n\n\n

What are DDoS attacks<\/strong><\/h2>\n\n\n\n

A DDoS (Distributed Denial of Service) attack is a distributed denial of service.\nIn other words, attackers perform certain actions to make the site stop working. <\/p>\n\n\n\n

During a DDoS attack, they send from controlled resources a huge number of requests to the server (virus traffic) over the network, which it is unable to process.\nThe system overloads and crashes, the server stops working, and clients lose access to the site. <\/p>\n\n\n\n

DDoS attacks especially affect personal websites created on free templates<\/a>.\nUsually, the owner of such a resource does not have enough experience in protecting against cyber threats.\nThe price of such carelessness can be very high.\nWe recommend buying a server administration<\/a> service to effectively combat DDoS attacks from TutHost. <\/p>\n\n\n\n

Classification of DDoS attacks<\/strong><\/h2>\n\n\n\n

The attack most often utilizes certain layers of the OSI open systems interaction model:<\/p>\n\n\n\n

    \n
  1. Infrastructure Levels: <\/strong>\n
      \n
    1. L3 networking – attacks target routers and switches. IP, DVMRP, ICMP, IGMP, PIM-SM, IPsec, IPX, RIP, DDP, OSPF, and OSPF protocols are used. <\/li>\n\n\n\n
    2. L4 transport – attacks are aimed at servers and various services (gaming, etc.). TCP and UDP protocols, DCCP, RUDP, SCTP, UDP Lite subprotocols are used.<\/li>\n<\/ol>\n<\/li>\n\n\n\n
    3. L7 Application layers.\nAt the application layer, attacks target services, applications, and sites.\nHTTP, HTTPS, and DNS protocols are used. <\/li>\n<\/ol>\n\n\n\n

      The goal of a network-level attack is to deny service to legitimate requests.\nDDoS attacks on transportation infrastructure are massive, they overload network bandwidth and servers with traffic, but are easily identified by certain characteristics. <\/p>\n\n\n\n

      Application-level attacks are not as massive, but target vulnerabilities in the application architecture.\nSuch attacks use SSL violation, flooding of DNS and HTTP requests, application API request streams or Wordpress Pingback. <\/p>\n\n\n\n

      Methods of protection against DDoS attacks<\/strong><\/h2>\n\n\n\n

      There are several methods to neutralize and protect against DDoS attacks.<\/p>\n\n\n\n

      Isolation of attack zones<\/strong><\/h3>\n\n\n\n

      To effectively neutralize an attack, you need to limit the area that can be affected by the cyber threat.\nReducing the zone reduces the hackers’ capabilities and increases the server administrator’s chances of detecting and neutralizing the attack in time. <\/p>\n\n\n\n

      You need to minimize or disable points of vulnerability such as ports, applications and protocols with which you don’t intend to interact, limit traffic to certain parts of the infrastructure (e.g. databases), use CDNs, load balancers, etc.<\/p>\n\n\n\n

      Increase server throughput and performance<\/strong><\/h3>\n\n\n\n

      This method helps to neutralize large-scale DDoS attacks by absorbing them.\nTo do this, you need to provide increased bandwidth when connecting to the network.\nDuring a large-scale attack, the bandwidth will be enough to keep the application or resource available to clients even with virus traffic.\nAlso, applications and resources should be placed near large internetworking nodes that help increase bandwidth. <\/p>\n\n\n\n

      DDoS attacks use a lot of resources, so you need to be able to adjust the server’s processing power.\nIncreased server performance supports the processing of large volumes of traffic.\nUse load balancers to regulate load distribution and minimize overloads. <\/p>\n\n\n\n

      Benchmark and atypical traffic<\/strong><\/h3>\n\n\n\n

      Another method of calculating a DDoS attack is to track traffic.\nAtypical traffic is when multiple requests arrive at non-standard times, from non-target regions from which there are usually no visitors.\nFor example, traffic suddenly increases at 2 a.m. from New Zealand, even though your target audience is in Ukraine. <\/p>\n\n\n\n

      Therefore, it is necessary to check logs and monitor such atypical activities.\nIf the volume of requests exceeds the maximum allowable traffic, you should take measures to neutralize it.\nBut at the same time, don’t forget that during the pre-holiday period or during the sales season, traffic may increase significantly due to natural causes. <\/p>\n\n\n\n

      Use of firewalls<\/strong><\/h3>\n\n\n\n

      To protect against DDoS attacks that exploit vulnerabilities in applications by injecting SQL code or cross-site scripting, it is better to use a firewall.\nIt will neutralize requests based on certain characteristics that differ from the reference traffic.\nFor example, requests from suspicious IPs or atypical geographic regions. <\/p>\n\n\n\n

      Who needs DDoS protection service<\/strong><\/h2>\n\n\n\n

      The most common targets of DDoS attacks are:<\/p>\n\n\n\n