Related

Is it possible to take a snapshot of a volume, destroy the volume, then restore it from the snapshot? Question Question
my SGP1 server can't access Question Question

Question

Does Digital Ocean have a DOS Protection Stragegy?

Posted January 24, 2020 5.9k views
DigitalOcean Accounts

I have tried several cloud providers(google, aws), but I have always fallen victim to DOS attack, fake martian packet attacks, that cripple down my servers, I have had to shutdown my servers.

I have just configured a digital ocean accounts added payment, but still hesitant to execute service with them. Do they have any protection against DOS? if not what’s the solution then.

Add a comment
wangoloj
By:
wangoloj

Related

Is it possible to take a snapshot of a volume, destroy the volume, then restore it from the snapshot? Question Question
my SGP1 server can't access Question Question

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

×
Submit an Answer
7 answers
KFSys January 26, 2020

Hi @wangoloj,

At Datacenter level, DigitalOcean is well-protected. Even if DDoS attack happen to Datacenter, you should still be able to use site normally. There was an answer on Community about measures DigitalOcean takes for Datacenter so you can read them here.

About your server (Droplet)… you’re on your own here. However you can take some additional measures to make it more secure.

CloudFlare is probably best out-of-box solution but if it doesn’t suit your needs you can do some server tweaking.

Set up Firewall. Allow only ports you use. Disable ping requests via firewall to be more protected against that type of attacks.
When you get DDoS attack you can use firewall to block IP ranges.

Research about Load Balancing. That can help take load from one server to multiple and make your site harder to go down.

Also, you can take a look at advanced Logging system so you have better management over server.

For all abode DigitalOcean has great tutorials that can get you help starting.

Regards,
KDSys

Reply Report
TXCSecurity February 2, 2020

Greetings @wangoloj,

From my research and current practices with my DigitalOcean servers, the answer to your question would be, yes. DigitalOcean has a good backbone when it comes to Anti DDoS, believe it or not, slap a few iptables and rate limiting on your VPS and you’ll be set. If you ever need any sort of help against DDoS attacks on your servers, hit me up! I’d be more than glad to help you against skids and put your server in a defense position and ready for every attack.

Feel free to contact me on discord!:

Toxic#0003

Cheers For The Good Guys,
Toxic

Reply Report
niftylettuce August 31, 2020
[deleted]
Reply Report
niftylettuce August 31, 2020
[deleted]
Reply Report
niftylettuce August 31, 2020

I’m a current customer. Digital Ocean’s response to DDOS attacks is unacceptable. They will take your network offline and disable network traffic without sending you ANY notifications whatsoever. Then you will have to file support tickets and tell them what is wrong, just to have to wait over an hour for them to say “Oh yeah, you were right, you were DDOS’d and we took you offline, sorry about that”. Total nonsense. I’m definitely NEVER using Digital Ocean again and cannot recommend them at all. Not only did I not receive a notification of network traffic disabled, this cost thousands of dollars in losses.

Reply Report
niftylettuce August 31, 2020
[deleted]
Reply Report
niftylettuce August 31, 2020
[deleted]
Reply Report

Related

Looking for something else?

Ask a new question Search for more help