Ask HN: Reasonably priced EU hosting with DDoS filtering? | Hacker News Reader

Ask HN: Reasonably priced EU hosting with DDoS filtering?

2 pointsddostarget3 comments

Hi. I'm hoping to find a VPS (or reasonably priced dedicated) host with a configurable edge firewall. So far, the only option I've found is OVH, which lets us block certain source ports before anything reaches the server and has been working quite well, but I'm hoping there's more options out there.

Context: I help run servers for a small multiplayer game, and a persistent troll has been targeting us and other active servers for months. This mostly consists of fairly low-bandwidth reflective attacks abusing protocols like NTP. They've also abused Oracle's free tier to generate larger attacks.

View on HN

OVH offers more than a firewall. They provide all of their OVHCloud customers with anti-DDoS services that will block most attacks automatically at no additonal charge. https://us.ovhcloud.com/security/anti-ddos/

AWS offers their Shield product, although your requirement of "reasonably priced" may exclude AWS in general https://aws.amazon.com/shield/ .

Cloudflare Spectrum can protect TCP/UDP services including games, they actually call out Minecraft specifically. https://www.cloudflare.com/products/cloudflare-spectrum/mine...

AWS is out of our price range - Shield is quoted at $3000/month and Network Firewall Endpoint (which also looked promising) is ~$300/month. Both of these are significantly higher than the OVH VPS we're using. I might look into if whether we can activate NFE only at peak hours to cut that down.

Unfortunately the game isn't Minecraft (it's Quake), so Cloudflare isn't an option without an "enterprise" plan. I'm assuming that's also way beyond our means since they want customers to contact them for pricing.

I'm kind of confused at the pricing difference here - OVH manages to provide this for our $20/month VPS. Surely there must be another comparable provider?

Edit: Having done some more searching, Linode seem to have something similar to OVH as of 2020, but I'll have to look into it. DigitalOcean is reported as blackholing too easily, and vultr's marketing only talks about protecting websites.

Based entirely on your low price requirement I’d check out tcpshield.com and path.net. Both smaller players but the price scales down to match their size.

Reply on news.ycombinator.com