Do people think CloudFlare will stop DDoS attacks?

David Beroff · Dec 31, 2016

Nowadays on hosting forums, I have been seeing more and more people start recommending CloudFlare for the prevention of DDoS attacks, Why is this? and can CloudFlare really anti large DDOS attacks? What is your experience?

EcommIndiaCloudIT · Dec 31, 2016

First things first. You can never "Stop" a DDOS attack. You can only "mitigate" it. Keeping this in mind we should always look at the best ways to mitigate rather than prevent or stop and when you start looking at the features offered by various providers with this mindset, things start to become very clear.

Second thing to understand is that when you use a 3rd party provider for DDOS, almost always your data is being re-routed through their network which means you are adding latency every time someone wants to visit your site. Needless to say if your data is highly confidential, then this is a bigger security problem/loophole and you should look at implementing your own DDOS mitigation solutions rather than letting your confidential data go through filtering networks that you have no control over.

Now, as I understand CoudFlare provides various level of DDOS protection. Unless you are paying for the highest plan they are offering, the whole thing is pointless since the lower plans can easily be implemented on your own sever using web firewalls. If you are already on something like AWS, then even the highest plan that cloud flare offers becomes pointless since you have so many other ways you can mitigate this using the tools within AWS.

However, there are times when you would rather just let someone else's network take the load and do all the offsite data scrubbing for you before it hits your server. So unless you are a multi million dollar corporation, its better off you implement your own DDOS mitigation solutions.

VirtuBox · Dec 31, 2016

Cloudflare is the first step to be protected against DDoS, but with free plans, it require to use a special page during 5 seconds to check your browser and make sure you are real visitor, and it doesn't protect your server, only your domains with the Cloudflare Proxy.
If an attacker find your server IP, he will be able to DDoS it and Cloudflare will be useless.

DDoS attacks will not stop in the next few years, the last one against OVH with up to 1TBps is the proof DDoS is still used and it's easier to DDoS now using any device connected to internet.
But that's the job of Hosting Providers to fight against DDoS, Cloudflare will help them, because they do a very good job with their DNS service, but they still have a small network compare to company like OVH (7TB Bandwidth and 5TB Exta for DDoS)

RDO Servers · Dec 31, 2016

Yes Cloudflare will stop DDoS attacks from reaching your server if you have the appropriate Cloudflare plan and the attack is not directed at your server IP directly.

True DDoS protection should use one of 2 methods.

1) In house. Very expensive to have enough bandwidth and hardware in house to protect against large attacks. Many providers advertise their in house protection, but may only be able to protect against attacks < 2Gbps.

2) Tunneled protection. This is when you have your own IP block which is being announced by the DDoS protection providers routers. All traffic will go to their routers, through their DDoS protection network, then back to your server's via a GRE tunnel. This way, your network only accepts traffic that is encapsulated in the GRE tunnel (filtered traffic) and blocks all other traffic.

therohost · Jan 1, 2017

i used cloudflare free plan and its working good

DTS-NET · Feb 6, 2017

Have been using cloudflare since they started.
The awesome thing about cloudflare it works and they have offered more options year after year and keep investing which is what you want out of a company and they work with us partners and awesome to see how they have grown

RyanK · Feb 7, 2017

Cloudflare CEO recently wrote an informative blog post detailing how Cloudflare's architecture supports the scale needed to stop the biggest attacks.

https://blog.cloudflare.com/how-clo...lows-us-to-scale-to-stop-the-largest-attacks/

David Beroff · Feb 7, 2017

RDO Servers said:
Yes Cloudflare will stop DDoS attacks from reaching your server if you have the appropriate Cloudflare plan and the attack is not directed at your server IP directly.

Exactly I had an opportunity to see DDoS attacks on my site and I enabled Cloudflare "I'm under attacks" and it worked as a charm but I dislike this page

My website visitors can leave the site because they think my website is having problem or took so long to access the website..etc
Is there a way to edit that page or I must change to paid plan?

RDO Servers said:
2) Tunneled protection. This is when you have your own IP block which is being announced by the DDoS protection providers routers. All traffic will go to their routers, through their DDoS protection network, then back to your server's via a GRE tunnel. This way, your network only accepts traffic that is encapsulated in the GRE tunnel (filtered traffic) and blocks all other traffic.

I like this way, it will filter traffic coming to my site and removed DDoS IPs while my site is still running normally.
If compared with DDoS server from Cloudflare which way has more advantages?

RyanK · Feb 7, 2017

Users on any of the paid plans have the ability to customize that under attack message.

RyanK · Feb 10, 2017

If you don't have I'm Under Attack Mode (IUAM) on, or have created page rules to perform additional checks, it's very unlikely that the interstitial page would come into play. There is also a new Rate Limiting feature that is coming soon (sign up for early access at https://www.cloudflare.com/rate-limiting/) that would prevent that screen from appearing. However, the option to customize that screen (and any other error related screens) is still limited to paid plans.

Do people think CloudFlare will stop DDoS attacks?

David Beroff

Well-known member

EcommIndiaCloudIT

Member

VirtuBox

Well-known member

RDO Servers

Well-known member

therohost

Member

DTS-NET

Well-known member

RyanK

New member

webhostuk

Well-known member

David Beroff

Well-known member

RyanK

New member

Dr. McKay

Well-known member

RyanK

New member

Gecko

Well-known member

RyanK

New member

Gecko

Well-known member

Latest posts New threads

Latest posts

New threads

Latest Hosting Offers New Reviews

Latest hosting offers

Popular Contributors - Past 30 Days

Sponsors

Tag Cloud