Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
ddos [2021/04/24 12:51]
cubebuilder
ddos [2021/06/20 16:29] (current)
cubebuilder
Line 1: Line 1:
-====== DDOS Protection ======+====== DDoS Protection ======
  
 ===== What does this service do? ===== ===== What does this service do? =====
  
-This addon provides you with an affordable source of [[http://en.wikipedia.org/wiki/Denial-of-service_attack|Denial Of Service]] protection. +This addon provides you with an affordable source of [[http://en.wikipedia.org/wiki/Denial-of-service_attack|Denial Of Service]] protection.
  
-We use [[https://path.net|Path.net]] for our DDOS Protection on all DDOS Protected IPs.+These addresses are available then on your slice for you to use locally, or to tunnel to another machine. 
 + 
 +We use the [[https://path.net|Path Network]] for our DDoS Protection on all DDoS Protected IPs
 + 
 +We also offer an option for you to protect your own blocks (no smaller than a /24) of IP addresses.
  
 If you don't know what this is, nor have you been sent an email regarding a nullroute being applied against your IP, it's unlikely you need this :) If you don't know what this is, nor have you been sent an email regarding a nullroute being applied against your IP, it's unlikely you need this :)
Line 11: Line 15:
 ===== How much does it cost ? ===== ===== How much does it cost ? =====
  
-Protected IP addresses cost $3.00/month per IP address in all locations we operate.+Protected IP addresses cost **$3.00/month** per IP address in all locations we operate
 + 
 +Bringing your own IP blocks for protection are charged $50/mo per /24.
  
 ===== How much filtering is provided? ===== ===== How much filtering is provided? =====
  
-Path.net provides 3Tbit+ DDOS Protection on all DDOS Protected IPs.+Path.net provides 3.5Tbit+ DDOS Protection on all DDOS Protected IPs.
  
 ===== What types of floods does it protect against? ===== ===== What types of floods does it protect against? =====
Line 64: Line 70:
 ===== What extra features do you include? ===== ===== What extra features do you include? =====
  
-You can configure the DDOS Protection firewall on the [[https://manage.buyvm.net|Stallion]]. Please note that the DDOS Protection firewall only works on **a path.net IP.**+You can configure the DDoS Protection firewall, and add Application Filters on [[https://manage.buyvm.net|Stallion]]. 
 +Please note that the DDoS Protection firewall only works on **a path.net protected IP**
 +The firewall rules are configured per IP. To access these settings: 
 +   - Go to the VPS that has the address you would like to control. 
 +   - Choose the "Networking" tab. 
 +   - Press the gear next to the IP address you would like to configure. 
 +   - In the dropdown that appears, press "Configure DDOS Protection" 
 + 
 +This will take you to the configuration page for the chosen IP. There are two tabs, Firewall Rules and Application Filters.
  
-If you are still using Cloudflare Magic Transit create a ticket at the [[https://my.frantech.ca/|billing page]] to have your IP swapped over to Path.+Firewall rules allow you to block or allow incoming traffic, based on source address, protocol, source and destination ports if applicable, Rules have optional descriptions as well, to allow you to note what the rule covers. 
 +More specific rules take precedence over less specific rulesA recommended strategy is to deny all traffic on all protocols, then only allow the traffic you need.
  
-You can also add Application filters on the Stallion aswell.+The application filters allow you to protect your applications against attacks that are specific to them.
  
 Path.net currently offers these application filters: Path.net currently offers these application filters:
Line 76: Line 91:
   * FiveM Server **(BETA)**   * FiveM Server **(BETA)**
   * RAKNET (Rust, Minecraft Bedrock, Geyser, etc)   * RAKNET (Rust, Minecraft Bedrock, Geyser, etc)
-  * TCP SYNPROXY +  * TCP SYNPROXY (any TCP application) 
-//Note: Some filters may provide a ticket to be made.//+//Note: Some filters may require a ticket. (Such as Minecraft or HTTP Layer 7 Protection.)//
  
 ===== Is there an SLA? ===== ===== Is there an SLA? =====
Line 90: Line 105:
 ===== How long do I have to wait to be activated? ===== ===== How long do I have to wait to be activated? =====
  
-DDOS protected IP's are automatically bound at order time. Ordering them at any other time will take anywhere+DDoS protected IP's are automatically bound at order time. Ordering them at any other time will take anywhere
 from 5 minutes to a few hours depending on the time of day. from 5 minutes to a few hours depending on the time of day.
  
Line 97: Line 112:
 You can find your IP address listed in the networking section in the [[https://manage.buyvm.net|Stallion]]. You can find your IP address listed in the networking section in the [[https://manage.buyvm.net|Stallion]].
  
-The DDOS Protected IP should show up and the type should say **DDoS Protected** in red.+The DDoS Protected IP should show up and the type should say **DDoS Protected** in red.
  
 +===== How do I enable my DDoS Protected IP and make it my primary IP? =====
 +  - Go to Stallion and select the server in question and click "Networking"
 +  - Activate the DDoS Protected IP and turn off the non protected IP if needed.
 +  - Click on the dropdown where it says "Main IP Address" and select your protected IP and click "Save Changes". Setting this makes this IP be handed out over DHCP.
 +  - Reboot your VPS or restart its' networking.
 +  - Run ''curl ipinfo.io'' and see if your DDOS Protected IP shows up. If you're using Windows Server 2016 running ''curl ipinfo.io'' in Command Prompt should work. If you're using Windows 2012 you may need to open a internet browser and go to [[https://ipinfo.io|ipinfo.io]] and see if your DDOS Protected IP shows up.
  
 ===== What services will you not protect? ===== ===== What services will you not protect? =====
  
 Please abide by our  Please abide by our 
-[[https://my.frantech.ca/tos.php|Terms of Service]] and [[https://my.frantech.ca/aup.php|Acceptable Use Policy]] for a list of applications allowed on our network. +[[https://buyvm.net/terms-of-service/|Terms of Service]] and [[https://buyvm.net/acceptable-use-policy/|Acceptable Use Policy]] for a list of applications allowed on our network. 
  
 TL;DR Camfrog is fine. TL;DR Camfrog is fine.