DDoS or php-fpm bad script?

RoldanLT said:
Aw, why is HTTPS not enabled on your domain? :D
Click to expand...
Because I'm not a retard like most people ;) I don't have a shop and I like to make more money through ads lol

https was overhyped, esp in the forum community...imo. Now Google wants to go with http2 or w/e and ditch https/spdy. With things like that, I'm a "wait and see" kind of guy. And I'm glad I waited...bc all those people saying their ad revenue took a huge dip...that would have killed us.
 
Cyb3r said:
Also I don't think they use layer 7 DDoS mitigation, But I have to say the uptime on their server better than any other company I hosted with, I tried 2 previous hosts one of them was "BuyVM", I was suffering all kind of attacks, their layer 7 DDoS protection for some reason was broken.
Click to expand...

It is correct that OVH does not provide Layer 7 protection. The funny thing is that everybody seems to think Layer 7 DDoS are so amazingly difficult to prevent. Those people simply don't know what they're talking about. Layer 7 attacks are more difficult to DETECT, but protecting from them is generally as simple as having good firewall/server rules in effect.

Cyb3r said:
Now is there any possible way to change my primary server IP? I already got 2 additional IP's I don't use.
Click to expand...

It's always possible. How easy or difficult it is to do depends on if you have a control panel installed, etc. Control panel would make it incredibly easy. No control panel is going to result in editing configuration files on the server, but still not terribly difficult.

Cyb3r said:
Oh and BTW it's "He" not "She". :p
Click to expand...

I'll admit...your avatar threw me! ha ha ha! :D


AzzidReign said:
Whether you listen to my advice or not, I'd be careful listening to the ones that haven't dealt with an attack over 50gbps multiple times.
Click to expand...

50 Gbps is nothing these days, unfortunately. Attacks on our site alone have regularly been 150-200 Gbps, with peaks of 300-400 Gbps. Client sites have been more than that. It's an unfortunate byproduct of really cheap 1 Gbps+ VPSs and increasingly fast home Internet connections. 300 mbps to 1 Gbps home Internet connections, for example, are very common here in California. You take over 50 home computers (which is nothing) and you have a 50 Gbps botnet. Kinda scary, to be honest.
 
WSWD said:
The funny thing is that everybody seems to think Layer 7 DDoS are so amazingly difficult to prevent. Those people simply don't know what they're talking about. Layer 7 attacks are more difficult to DETECT, but protecting from them is generally as simple as having good firewall/server rules in effect.
Click to expand...
:cool:
 
WSWD said:
It is correct that OVH does not provide Layer 7 protection. The funny thing is that everybody seems to think Layer 7 DDoS are so amazingly difficult to prevent. Those people simply don't know what they're talking about. Layer 7 attacks are more difficult to DETECT, but protecting from them is generally as simple as having good firewall/server rules in effect.
Click to expand...

I asked OVH and they said they have it but it's not that effective, and I know I can prevent layer 7 attacks from nginx config setting a max requests for each IP but I couldn't do it correctly I keep breaking my site trying to set it correctly. lol

WSWD said:
It's always possible. How easy or difficult it is to do depends on if you have a control panel installed, etc. Control panel would make it incredibly easy. No control panel is going to result in editing configuration files on the server, but still not terribly difficult.
Click to expand...

Well I figured it out but unfortunately the main IP stays directed at the server but I can add a secondary IP that's all, I talked to them about changing my IP address and they said you have to order a new VPS -_-

WSWD said:
50 Gbps is nothing these days, unfortunately. Attacks on our site alone have regularly been 150-200 Gbps, with peaks of 300-400 Gbps. Client sites have been more than that. It's an unfortunate byproduct of really cheap 1 Gbps+ VPSs and increasingly fast home Internet connections. 300 mbps to 1 Gbps home Internet connections, for example, are very common here in California. You take over 50 home computers (which is nothing) and you have a 50 Gbps botnet. Kinda scary, to be honest.
Click to expand...

I will be moving to cheaper host like ramnode or go back to buyVM and use sucuri pro, I'm really sick from those skids, I moved to OVH only for DDoS protection but they turned to be really bad, my site went down yesterday and I didn't know because I was sleep, they couldn't do anything about it.
 
Linode has backup/snapshot feature with additional fee.
If you only need 4gb of RAM and below I would go for Ramnode.
You will have access of 4 cores E3 CPUs (3.3GHz+ per core) much faster than Linode.
 
RoldanLT said:
Linode has backup/snapshot feature with additional fee.
If you only need 4gb of RAM and below I would go for Ramnode.
You will have access of 4 cores E3 CPUs (3.3GHz+ per core) much faster than Linode.
Click to expand...

That's exactly what i'm looking for, thanks. :D
 
RoldanLT said:
Linode has backup/snapshot feature with additional fee.
If you only need 4gb of RAM and below I would go for Ramnode.
You will have access of 4 cores E3 CPUs (3.3GHz+ per core) much faster than Linode.
Click to expand...

I just got Ramnode 2048 for 3 months and sucuri, I got a problem installing centminmod on the new server, when trying to run the file ./centmin.sh it get stuck like this http://i.imgur.com/VTTHl4k.png, nothing heppening and I have to press CTRL+C to go back, any idea why?
 
Cyb3r said:
I just got Ramnode 2048 for 3 months and sucuri, I got a problem installing centminmod on the new server, when trying to run the file ./centmin.sh it get stuck like this http://i.imgur.com/VTTHl4k.png, nothing heppening and I have to press CTRL+C to go back, any idea why?
Click to expand...
If you haven't installed Centmin Mod yet, you maybe in luck as I just made backported changes for Nginx HTTP/2 into stable release https://community.centminmod.com/th...000-08-how-to-install-update.4061/#post-18527

as to hangs, when centmin.sh runs it has auto background tasks or checks which may download or call stuff remotely.. it could be those remote calls are slow
 
eva2000 said:
If you haven't installed Centmin Mod yet, you maybe in luck as I just made backported changes for Nginx HTTP/2 into stable release https://community.centminmod.com/th...000-08-how-to-install-update.4061/#post-18527

as to hangs, when centmin.sh runs it has auto background tasks or checks which may download or call stuff remotely.. it could be those remote calls are slow
Click to expand...

Thank you eva for the info, I just installed this 123.08stable is it the same version?

Also what difference should I see in the new release?

Idk anything about http/2 =(
 
Cyb3r said:
Thank you eva for the info, I just installed this 123.08stable is it the same version?

Also what difference should I see in the new release?

Idk anything about http/2 =(
Click to expand...
in SSH type this command, if it returns empty then you do not have latest 123.08stable updated for Nginx HTTP/2
Code: 
grep NGINX_HTTP2 /usr/local/src/centminmod/centmin.sh
if it returns something like
Code: 
grep NGINX_HTTP2 /usr/local/src/centminmod/centmin.sh
NGINX_HTTP2=y                # Nginx http/2 patch https://community.centminmod.com/threads/4127/
then you have latest 123.08stable build with back ported Nginx HTTP/2

To update your Centmin Mod builds follow instructions at http://centminmod.com/upgrade.html. If you haven't installed Centmin Mod yet, just remove directory at /usr/local/src/centminmod and you can just do the initial install steps again outlined at http://centminmod.com/download.html

HTTP/2 info at https://community.centminmod.com/threads/google-dropping-spdy-in-favor-of-http-2.2283/
 
eva2000 said:
in SSH type this command, if it returns empty then you do not have latest 123.08stable updated for Nginx HTTP/2
Code: 
grep NGINX_HTTP2 /usr/local/src/centminmod/centmin.sh
if it returns something like
Code: 
grep NGINX_HTTP2 /usr/local/src/centminmod/centmin.sh
NGINX_HTTP2=y                # Nginx http/2 patch https://community.centminmod.com/threads/4127/
then you have latest 123.08stable build with back ported Nginx HTTP/2

To update your Centmin Mod builds follow instructions at http://centminmod.com/upgrade.html

HTTP/2 info at https://community.centminmod.com/threads/google-dropping-spdy-in-favor-of-http-2.2283/
Click to expand...

Code: 
[root@server ~]# grep NGINX_HTTP2 /usr/local/src/centminmod/centmin.sh
NGINX_HTTP2=y                # Nginx http/2 patch https://community.centminmod.com/threads/4127/

I got the latest version that's awesome, and btw the problem with ./centmin.sh is there was another server installed, the apache were already installed so I had to reinstall the minimal CentOS 6.

I got one more question though, how can I copy all my settings from the current server to the new one, it will be a pain to re-configure everything. :(
 
You must log in or register to reply here.

Similar threads

S
  • Question Question
XF 2.3 PHP-FPM service keeps needing to be restarted after sending a mailshot
Replies
4
Views
43
Paul B
P
elsparkodiablo
nginx and php-fpm configuration
Replies
1
Views
3K
D.O.A.
D.O.A.
D
PHP-FPM: are you using it? Why or why not?
Replies
5
Views
3K
Cupara
Cupara
Cupara
  • Question Question
Do I need to configure more options in config.php for Redis?
Replies
0
Views
2K
Cupara
Cupara
Douglas Taylor
PHP-FPM Optimization Request
Replies
5
Views
1K
D.O.A.
D.O.A.
Back
Top Bottom