Apr, 2016 : Keep Your Website Protected From a DDoS Attack

📅 April 27, 2016 - Distributed Denial of Service (DDoS) attacks have become one of the worst things a business owner can deal with. Often, these attacks come with an email demanding a large sum of money from an anonymous source. The hacker holds your site hostage while waiting for a payment. This isn't something any business wants to deal with.

Protecting your website should be something you take care of before you ever have to consider paying the ransom. With the right DDoS protection, you won't have to worry about an attack killing your website. You need a good DDoS shield to provide the right amount of protecting.

Using a CBSP

A CBSP or Cloud-Based Security Provider is a popular way to mitigate a DDoS attack. This type of route allows for protection from some DDoS hacks by routing traffic through a secure infrastructure. The traffic goes through a scrubbing center at the CBSP and only legitimate traffic will end up at the website.

Routing and redirecting traffic is one way to keep the bad traffic out. This is done by either using BGP Rerouting or DNS Rerouting. BGP Rerouting allows the client to configure the domain name of the website for resolving a CBSP IP address. This is necessary when managing a whole/24IP block.

The problem with DNS rerouting is that it cannot eradicate potential DDoS attacks. Instead, if the hacker attacks the hosting IP address, it will be able to get through and cause all types of issues.

Using Automated Scanning Tools

While many website owners use CBSPs to help provide protection from DDoS attacks, it's important for the real web server IP address to stay hidden from the potential attack of a hacker. About 70% of those using CBSPs actually reveal the real IP address, which isn't safe.

Automated tools, such as CloudPiercer will help. This type of tool helps to decide if your site is susceptible by scanning for the actual IP address of the site. This is a great tool to help keep your site from getting attacked by a DDoS attack.

Other Countermeasures

While it's not easy to hide an IP address of a website and CBSPs don't always do this, deploying automated scanning tools help. However, they are not the only way to keep DDoS attacks from happening. Adding a perimeter firewall can help keep out all unsafe connections. This helps to make it harder of hackers, especially if they are trying to exploit a black-hole.

Of course, it all starts with the hosting you choose. If you choose the right type of hosting for your website, you will have DDoS attack protection built into your hosting. However, it can still be a good idea to take additional measures to help protect your website from DDoS attacks.

You should consider the options and how vulnerable your site may be to these types of attacks. Make sure you do everything possible to protect your site from DDoS attacks before it's too late.