If ddos ​​is more than 1 Gbit, will the server go down?

Question

linux

Yes, I know that now any student can do ddos ​​at 40+ Gbps for free and spending only a day, but I have such a question, if the server has a 1 Gbps channel, and I filter traffic effectively, then the server will go down immediately after crossing the traffic mark ddos 1gbit? And it won't even matter how smart the filtration system is? Or is it possible to somehow filter 1.5-2Gbps?

Answer 1

Firstly, this is done at the host level in a much more efficient way.
You do not have a direct channel of 1 G.
This is the hoster's channel, on which you and many more of his clients sit. Yes, the input channel will be wider. But 1 G is not clearly allocated to you at all.
Since the channel is shared, the hoster protects it.
Smart hosters - enter into agreements with specialized companies in advance (it's inexpensive if you sign on a large scale). Mine just concluded. It didn't affect my rates at all.
The server will not lie down upon reaching this mark.
The server will lag - the request-response will come and go intermittently.
And the closer - the more and more to lag.
If you have a jamb inside, for example, each request is completely written to the log or inefficient work with the database, then there may also be problems due to the disk.
Smart filtration system is the wrong term.
A smart filtering system integrated into the site engine and taking into account all the nuances - for example, to serve logged-in users earlier - this will help.
Before reaching 1G, your filtering system will improve the site's response.
But not for 1 G.
Everything is already bad there and filtering at the site level will not help.
This needs to be done at the data center level, at the hoster level.

Answer 2

If you filter directly on the server - as soon as the channel to the server is clogged - that's it, the server will go down (from the point of view of the client).
If you filter in front of the server, that is, when there is some kind of special piece of iron and protects the server, the question is how quickly the channel To this piece of iron will clog.

Answer 3

if you have a 1Gbps channel and you will be filtering on the server side, then ddos ​​at > 1Gbps will first put your input channel.