Does DigitalOcean have an Anti DDOS protection??

Question

I am really concerned about this. I don’t plan to use Cloudflare as it forces me to use their free SSL cert which I don’t like, I have my own certs which I bought especially for my wordpress website and I also plan to use an EV cert in one day which Cloudflare doesn’t support in their free plan. Also I have a premium DNS service, so cloudflare is really out of my border. I am wondering what should I do if I am getting a DDOS attack? I read many horror stories how droplets are disabled for 3 hours without letting access, and how they are unable to handle flood. I am wondering Does DigitalOcean have an Anti DDOS protection at least in their end? can it at least handle small DDOS attack? I saw some people have stated, DigitalOcean isn’t for production and only for developers. Is that even true?
Thanks.

Answer 1

niftylettuce August 31, 2020

I’m a current customer. Digital Ocean’s response to DDOS attacks is unacceptable. They will take your network offline and disable network traffic without sending you ANY notifications whatsoever. Then you will have to file support tickets and tell them what is wrong, just to have to wait over an hour for them to say “Oh yeah, you were right, you were DDOS’d and we took you offline, sorry about that”. Total nonsense. I’m definitely NEVER using Digital Ocean again and cannot recommend them at all. Not only did I not receive a notification of network traffic disabled, this cost thousands of dollars in losses.

Reply Report

afpedra August 31, 2021

I’m facing this same issue right now. A false-positive DDOS and I can’t get access to my Droplet (I use DO for 5 years and it never happened before), because they gave me a few options, which are: delete everything; backup and delete everything; or identify the problem and maybe backup/delete everything, I guess.

Update: Now, after a day passed by, whenever I turn on the machine, I still don’t have access from outside the local network, even though eth0 is UP.
Reply Report

Answer 2

afpedra August 31, 2021

I’m facing this same issue right now. A false-positive DDOS and I can’t get access to my Droplet (I use DO for 5 years and it never happened before), because they gave me a few options, which are: delete everything; backup and delete everything; or identify the problem and maybe backup/delete everything, I guess.

Update: Now, after a day passed by, whenever I turn on the machine, I still don’t have access from outside the local network, even though eth0 is UP.
Reply Report

Answer 3

lmhieu1608 May 7, 2017

I solved this problem by installing vDDOS Proxy Protection software as a Reverse Proxy (simulating CloudFlare’s mechanism by combining many things like Nginx proxy + Testcookie + reCaptcha + Iptables + Cloudfalre API …)

Reply Report

Answer 4

xMudrii December 23, 2016

At Datacenter level, DigitalOcean is well-protected. Even if DDoS attack happen to Datacenter, you should still be able to use site normally. There was an answer on Community about measures DigitalOcean takes for Datacenter so you can read them here.

About your server (Droplet)… you’re on your own here. However you can take some additional measures to make it more secure.

CloudFlare is probably best out-of-box solution but if it doesn’t suit your needs you can do some server tweaking.

Set up Firewall. Allow only ports you use. Disable ping requests via firewall to be more protected against that type of attacks.
When you get DDoS attack you can use firewall to block IP ranges.

Research about Load Balancing. That can help take load from one server to multiple and make your site harder to go down.

Also, you can take a look at advanced Logging system so you have better management over server.

For all abode DigitalOcean has great tutorials that can get you help starting.

Reply Report

NUCUTA December 23, 2016

thanks. I am trying this, hopefully it will help me somehow
https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-config-server-firewall-csf-on-ubuntu

How To Install and Configure Config Server Firewall (CSF) on Ubuntu
by Lassi Ruonavaara
Config Server Firewall (CSF) is a free and advanced firewall for most Linux distributions and Linux based VPS. Learn how to install and configure on Ubuntu.
Reply Report
kajmagnus July 20, 2018

With “Set up Firewall”, do you mean sth like iptables inside the droplet? Or some D.O. provided firewall?
Reply Report
- xMudrii July 20, 2018
  
  Whatever do you prefer. You can go with IPTables or UFW, but also with DigitalOcean Cloud Firewalls, which are free of charge.
  
  The positive side with DO Cloud Firewalls is that they are at the network level, in other words, the traffic is blocked before it even reaches your Droplets, which means less load to your Droplets.
  
  Iptables Essentials: Common Firewall Rules and Commands
  by Mitchell Anicas
  Iptables is a software firewall for Linux distributions. This cheat sheet-style guide provides a quick reference to iptables commands that will create firewall rules that are useful in common, everyday scenarios. This includes iptables examples of allowing and blocking various services by port, network interface, and source IP address.
  
  Reply Report
  
  kajmagnus July 20, 2018
  
  Thanks
  
  Reply Report
  
  berndinox October 14, 2020
  
  Sorry i have to come in here.
  But Software based protection is absolutely not able to avoide ddos. Well it may can block some strange requests, but in that case its acting more like a WAF.
  A real ddos attack will make exhaust your available max connection speed. Its like if you take a garden hose which is able to Transfer 10 liter per Minute and try to get 100 Liter/min through.
  To be able to Block that, you need a „device“ who can handle those 100 Liter to throttle it down.
  As told before, cloudflare is great
  
  :)
  
  Reply Report

Answer 5

NUCUTA December 23, 2016

thanks. I am trying this, hopefully it will help me somehow
https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-config-server-firewall-csf-on-ubuntu

How To Install and Configure Config Server Firewall (CSF) on Ubuntu
by Lassi Ruonavaara
Config Server Firewall (CSF) is a free and advanced firewall for most Linux distributions and Linux based VPS. Learn how to install and configure on Ubuntu.
Reply Report
kajmagnus July 20, 2018

With “Set up Firewall”, do you mean sth like iptables inside the droplet? Or some D.O. provided firewall?
Reply Report
- xMudrii July 20, 2018
  
  Whatever do you prefer. You can go with IPTables or UFW, but also with DigitalOcean Cloud Firewalls, which are free of charge.
  
  The positive side with DO Cloud Firewalls is that they are at the network level, in other words, the traffic is blocked before it even reaches your Droplets, which means less load to your Droplets.
  
  Iptables Essentials: Common Firewall Rules and Commands
  by Mitchell Anicas
  Iptables is a software firewall for Linux distributions. This cheat sheet-style guide provides a quick reference to iptables commands that will create firewall rules that are useful in common, everyday scenarios. This includes iptables examples of allowing and blocking various services by port, network interface, and source IP address.
  
  Reply Report
  
  kajmagnus July 20, 2018
  
  Thanks
  
  Reply Report
  
  berndinox October 14, 2020
  
  Sorry i have to come in here.
  But Software based protection is absolutely not able to avoide ddos. Well it may can block some strange requests, but in that case its acting more like a WAF.
  A real ddos attack will make exhaust your available max connection speed. Its like if you take a garden hose which is able to Transfer 10 liter per Minute and try to get 100 Liter/min through.
  To be able to Block that, you need a „device“ who can handle those 100 Liter to throttle it down.
  As told before, cloudflare is great
  
  :)
  
  Reply Report

Related

Question

Does DigitalOcean have an Anti DDOS protection??

Related

Leave a comment

Looking for something else?

Sign up for our newsletter

Related

Question

Does DigitalOcean have an Anti DDOS protection??

Related

Leave a comment

Related

question

How does SSH find a local key?

question

Connecting to Droplet via FileZilla

question

How to regain access droplet if my main machine is not available?

question

Cannot access droplet: Password change required but no TTY available.

Looking for something else?