Allow External IP to Ping my Digital Ocean Server IP.

December 23, 2014 3.2k views

Hello,

I was receiving around 1500 Pings / Second from my another server IP to digital ocean IP & you guys have thought of it as DDOS which was not actually the case.

I wan to know if I ned to implement firewall using following method :

https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-config-server-firewall-csf-on-ubuntu

I did not have firewall earlier. Now, it has been understood if answer of above is in a YES. In this, if I set-up max number of pings from one or many external IPs to Digital Ocean ( My Server ) , Will it be considered as DDOS or not ?

Thanks,
Mayank

1 comment
  • Our detection of incoming DDoS attacks has a much higher threshold than what you are describing. Since our incoming DDoS detection is done at the network level a firewall on your droplet itself would not have any effect as the traffic will have already saturated the network interface and caused issues for other droplets on that physical node. This also means that you may not be seeing full logs of the attack that was stopped at this level. Instead I would recommend setting up some type of outside DDoS protection such as that provided by CloudFlare to provide this layer of protection for your droplets.

1 Answer

This question was answered by @ryanpq:

Our detection of incoming DDoS attacks has a much higher threshold than what you are describing. Since our incoming DDoS detection is done at the network level a firewall on your droplet itself would not have any effect as the traffic will have already saturated the network interface and caused issues for other droplets on that physical node. This also means that you may not be seeing full logs of the attack that was stopped at this level. Instead I would recommend setting up some type of outside DDoS protection such as that provided by CloudFlare to provide this layer of protection for your droplets.

View the original comment

Have another answer? Share your knowledge.