Hacker News Reader

Comment by xslvrxslwt | Hacker News Reader

Hetzner is not on the level of the any you mentioned. It's dirt cheap because latencies and protections against exploits are non-existent, sure it serves good when you don't have such needs but the moment you need any (i.e. DDoS protection and low/stable ms for game servers) - hetzner is out of the window.

- Someone that used to fry lil hetzner servers for fun

View on HN

Not my experience at all. Hetzner obviously does offer DDoS protection and responds quickly to that kind of issues. I've also had Hetzner techs proactively contact me regarding attacks on our infrastructure (none of which actually took any of our servers down, by the way). For specialized needs, you can even have your own hardware installed next by your servers in the same rack for a relatively small premium.

sir, I'm the former staff member of the infamous webstresser.org, I think I should know what we received millions of dollars for,

I understand that you never received attacks of such 'large' scale but it takes $5 to take a hetzner server down (assuming you don't know how to do it yourself)

If you don't mind answering, what was the nature of your attacks? Was it bandwidth exhaustion or layer-7 CPU exhaustion?

Details would be enlightening : ) Was it the servers or the applications running on the servers that were taken down? Running bare metal servers exposed to the public is a fairly obvious footgun, there should be at least one layer of load balancing in front in addition to the provider’s firewalls. I’d argue MOST publicly exposed servers run by amateurs can be taken down for less than $5. Regardless of them being bare metal at Hetzner or some EC2 instance.

Presumably you can front it with CloudFlare if you need DDoS protection?

Not if you're running game servers; those require plain UDP (sometimes TCP) proxying and CF only offers that on the enterprise plan afaik.

I'm not sure if this is the enterprise plan, but it is designed for proxying game servers and preventing ddos like steam's newer networking:

https://www.cloudflare.com/products/cloudflare-spectrum/

It’s incredibly expensive, looked into it before.

Addition to the replies before mine, even if you could use CF - it's a joke, it's easily bypassable and there's tons of methods to do it (i.e. the most common we used is huge botnets with simply emulated browsers sending tons of req/s, and that's just the 'public' one, there's tons of private ones we used to write ourselves that were much complex but needless as the one I mentioned before worked just fine)

Interesting. can you maybe tell us some anecdotes?

If you mean the anecdotes related to >used to fry lil hetzner servers for fun<

https://krebsonsecurity.com/2018/04/ddos-for-hire-service-we...

should be enough

Reply on news.ycombinator.com