Dns-operations mailing list

[Abraão Caldas <abraaocaldas AT gmail.com>]

Full protection is costly, they will bill you for how much PPS they can mitigate, and I can assure you, it´s very expensive.

2012/9/18 Jamyn Shanley <jshanley AT gmail.com>

On Tue, Sep 18, 2012 at 5:35 PM, Brian Koontz <brian AT opennicproject.org> wrote:

I am fortunate to host with an ISP (suso.org) that actually works with

you to mitigate things like DDoS attacks.  I think that a hosting
provider that can't handle or isn't willing to help combat DDos
attacks isn't worth the time to deal with.

True, but a LOT of people shop for cheap hosting.  They get what they pay for.

 

Any site hosting a service (DNS, HTTP, gopher, whatever) can become
the target of a DDoS.  If a service provider isn't willing to work
with you on this, then they are probably in the wrong business.

They're not in the wrong business, they're in a completely different type of business - lowest price, bulk hosting. Now, that's not a market I want to use or be involved with, but it certainly exists, and it stays alive because there is a demand for it. But I think both professional and bulk hosting companies will always exist.

 

Then again, a $3/month hosting provider probably isn't interested in
keeping your business.  I imagine they approach all this from a
quantity standpoint.  Losing your account doesn't mean squat to them.

From their view, it's more like "I can try to keep this $3/month account, or I can cancel it and hopefully keep some of the other 200 accounts ($600/month) hosted on this same server before they leave because their site is down."  Those kinds of hosts don't invest in decent infrastructure or anything else that a reliable host pays for, because their margin is thin.  I think some of the low-priced hosting companies will make some effort to mitigate DOS, but not all.