How to protect yourself from ddos ​​in the data center?

Question

DDoS Protection

Tell me, is there a good option to protect the game server if it is located near a large DC? Prices for protection against DDOS in the DC itself are huge.

Cloud solutions are not suitable due to the increase in ping.

Maybe it's worth putting another machine next to the main server to filter traffic, or will it not help?

Answer 1

One machine will not be enough because ddos ​​protection involves several steps:
- redundancy of resources
- horizontal scaling under load
- mechanisms for disabling malicious connections
- a blocking mechanism for repeated accesses
This is a whole complex and you are like checkers or go. Latency should be reduced via CDN and usually anti-ddos as a service is there

Answer 2

See what kind of DC.
If you can, it's better to move to a hosting server that has DDoS protection by default. One of these is oh. He has a line of tariff plans with gaming DDoS protection.
And if the iron is yours and you can’t move anywhere, then it remains to buy protection.
There are at least 2 options here.
1. Buy protection from DC. If this is a serious DC, then most likely they have their own infrastructure to combat attacks. For example, Rostelecom. But there are many DCs that offer protection from third-party providers. For example, selectel resell curator.
2. Buy protection from a third party provider. In this case, the traffic will go through this provider. And you need to connect not via the Internet, but directly. If the DC is really big. Then he has the opportunity to organize a direct connection in his room or give a connection to a traffic exchange point where the necessary protection provider is present.