Linode Linode Announces DDOS Mitigation Protection

eva2000 · Jan 25, 2020

Linode has announced DDOS mitigation protection DDoS: An Additional Layer of Security from Linode | Linode.

We’re excited to announce advanced DDoS protection is now available and free for all Linode customers. With Linode DDoS, your servers and applications are shielded from unforeseen downtime and latency caused by distributed denial-of-service (DDoS) attacks.

Powered by our Next Generation Network, this additional layer of protection is always-on, fully automated, and applies advanced machine-learning and rules-based approaches to intelligently block malicious traffic.
Click to expand...

Linode press release announcement https://www.linode.com/press_releas...ed-ddos-protection-across-its-global-network/

PHILADELPHIA, January 24, 2020 — Linode, the world’s largest independent cloud provider, today announced advanced protection across its global network of 11 data centers to mitigate the impact of pervasive and costly distributed denial of service (DDoS) attacks. Like it has done with other critical services, Linode is making this additional layer of protection free for every one of its customers, no matter how big or small.
Click to expand...

Volumetric attacks are the most common type of DDoS attack, the virtual equivalent to intentionally causing a traffic-jam by flooding a highway with more cars than it can handle. Linode’s advanced DDoS protection has the capacity to withstand attacks larger than any seen in the industry to date, with no increased latency and no routing of a customer’s traffic to a third party, by applying real-time behavioral algorithms that detect and block volumetric traffic before it reaches a customer’s infrastructure. When a threat is detected, Linode blocks the attack inline, then distributes the increased traffic across its global fiber backbone. The new capability was designed to further minimize any impact to a customer’s services by addressing a broad range of DDoS attack methods, including UDP, SYN, HTTP floods, and more.
Click to expand...

Linode DDOS Protection page at Advanced Cloud DDoS Protection | Linode

eva2000 · Jan 25, 2020

seems Linode Firewall is coming soon too

“DDoS attacks are a clear and present danger for anyone doing business in the cloud today,” said Dan Spataro, Director of Infrastructure at Linode. “We’ve invested heavily in the capacity to mitigate these attacks across our global network and built the predictive technologies necessary to automatically detect and neutralize threats at our network edge before they can impact service. Coupled with our soon to be released Cloud Firewall solution, we’re giving customers the enhancements they need to scale with confidence.”
Click to expand...

BamaStangGuy · Jan 25, 2020

Great, I was contemplating DO because of their firewall but now will stick with Linode for sure.

rdan · Apr 23, 2020

Any personal experience how their DDOS protection actually protect?

eva2000 · Apr 23, 2020

BamaStangGuy said: ↑

Great, I was contemplating DO because of their firewall but now will stick with Linode for sure.
Click to expand...

Yeah we shall see. Though I tend to disable host's firewall in favour of Cloudflare Firewall on edge and CSF Firewall on server. Would have to see how Linode Firewall API performs to be able to control it from server level/SSH.

rdan said: ↑

Any personal experience how their DDOS protection actually protect?
Click to expand...

No experience yet. If they had DDOS protection enabled for my forums, it didn't kick in for a layer 7 DDOS attack I got yesterday on the forums. Maybe it's more for volumetric layer 3/4 network level DDOS attacks ? Cloudflare showed an extra 1 million requests within a few minutes. Cloudflare Firewall rules and caching optimisations have been adjusted/deployed to better handle it in future too

Yes Centmin Mod Nginx server on the forums were pushing 16,000+ concurrent Nginx connections which was the left over requests once Cloudflare caching absorbed the majority of them.

eva2000 · Apr 23, 2020

Some info on Linode's DDOS protection which uses Juniper Networks and Corero DDOS Protection via Corero SmartWall Threat Defense Director DDoS Mitigation Becomes Competitive Tool for Cloud Provider - Juniper Networks

After a DDoS attack a few years ago that disrupted operations, Linode re-architected its Internet edge to use the Juniper Networks® MX960 5G Universal Routing Platform for high-performance scalable routing. But as DDoS attacks continued to pummel the cloud provider, manual DDoS mitigation was no longer effective. Instead of creating a stressful, all-hands-on-deck situation every time the provider was hit, Linode wanted a more proactive approach that would allow it to automatically block and mitigate even the largest DDoS attacks in seconds.

“We needed more granular control over DDoS attacks,” Spataro says. “With static DDoS mitigation, we could keep our data centers up, but our customers would still feel the pain. We wanted to limit collateral damage.”
Click to expand...

Leverage Existing Network

Spataro discovered a solution at Juniper’s 2018 NXTWORK conference. The addition of Corero SmartWall Threat Defense Director, in combination with the MX960 routing platforms that Linode already used, would provide real-time DDoS mitigation. “We were one of the first proof-of-concept tests of the combined solution,” says Spataro. Linode can dynamically scale DDoS mitigation to the size of the attack. Linode’s MX960 routers monitor ingress traffic via sampled mirrors (which are essentially samples of the packets coming into the router). The routers forward the sampled traffic to Corero, which inspects every packet in search of a DDoS attack. All of this occurs in seconds. If an attack is detected, Corero automatically generates firewall-match filters so the MX960 routers can mitigate the event. Once normal operations resume, network telemetry continues to flow from the Juniper routers to monitor for the next attack. And because MX960 can filter traffic in real time, legitimate traffic flows on to its destination without any performance degradation.
Click to expand...

adamus007p · Apr 26, 2020

Hello @eva2000 your screens (NGINX currect connections) are coming from what?

eva2000 · Apr 26, 2020

adamus007p said: ↑

Hello @eva2000 your screens (NGINX currect connections) are coming from what?
Click to expand...

Using Nginx Amplify monitoring Nginx - Nginx Amplify Open Source Monitoring Service

rdan · May 19, 2020

eva2000 said: ↑

Some info on Linode's DDOS protection which uses Juniper Networks and Corero DDOS Protection via Corero SmartWall Threat Defense Director DDoS Mitigation Becomes Competitive Tool for Cloud Provider - Juniper Networks
Click to expand...

Seems the same software/hardware is used on BuyVM.

eva2000 · May 19, 2020

rdan said: ↑

Seems the same software/hardware is used on BuyVM.
Click to expand...

Where did you get that info from ? BuyVM IIRC has their own DDOS in house solution paired with others too.

rdan · May 20, 2020

From their Email

eva2000 · May 20, 2020

Juniper routers/hardware is common so could be

eva2000 · May 28, 2020

rdan said: ↑

Seems the same software/hardware is used on BuyVM.
Click to expand...

Looks like BuyVM also uses Cloudflare Magic Transit for DDOS protection at network level Hetzner, netcup or? the best for protection ddos the most powerful?

Cloudflare Magic Transit protects entire IP subnets from DDoS attacks, while also accelerating network traffic. It uses Cloudflare’s global network to mitigate attacks, employing two fundamental networking protocols, BGP and GRE, for routing and encapsulation.

All your network assets, whether on-premise or in private or public hosted cloud environments are safeguarded.
Click to expand...

Jon Snow · May 29, 2020

So if we're a Linode customer, exactly what do we have to do to opt-in to this or is there nothing needed from our side?

eva2000 · May 29, 2020

Jon Snow said: ↑

So if we're a Linode customer, exactly what do we have to do to opt-in to this or is there nothing needed from our side?
Click to expand...

Nothing needed, Linode network level DDOS mitigation is enabled for all Linode VPSes.

rdan · Aug 20, 2020

It's just weird to me that they announce and proud to have ddos protection yet their website still behind Cloudflare.

Jon Snow · Aug 20, 2020

rdan said: ↑

It's just weird to me that they announce and proud to have ddos protection yet their website still behind Cloudflare.
Click to expand...

Maybe they're just testing the waters and will eventually move over? Would be great if someone confronts them about it to see what they have to say on the matter.

eva2000 · Aug 20, 2020

rdan said: ↑

It's just weird to me that they announce and proud to have ddos protection yet their website still behind Cloudflare.
Click to expand...

Doesn't hurt to use both and Linode DDOS is for network level, while Cloudflare has both application (layer 7) + network (layer 3/4) protection. They could even double up on network level with Cloudflare Magic Transit too ???

Log in / Register

Forums

Want to subscribe to topics you're interested in?

Linode Linode Announces DDOS Mitigation Protection

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

BamaStangGuy Active Member

rdan Well-Known Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

adamus007p Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

Jon Snow Active Member

eva2000 Administrator Staff Member

rdan Well-Known Member

Jon Snow Active Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Want to subscribe to topics you're interested in?

Linode Linode Announces DDOS Mitigation Protection

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

BamaStangGuy Active Member

rdan Well-Known Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

adamus007p Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

Jon Snow Active Member

eva2000 Administrator Staff Member

rdan Well-Known Member

Jon Snow Active Member

eva2000 Administrator Staff Member

.