DOS and DDOS Protection in Webdock Datacenters
Last updated: September 16th 2024
Introduction
Webdock uses Voxility as our 3rd party provider for Volumetric DOS attacks (DDOS). In addition, Webdock monitors outgoing network activity and takes action through automated and manual means in order to prevent issues with our network. This page outlines how this works.
DDOS Protection with Voxility
Webdock Datacenters are protected through a leading 3rd party mitigation provider, Voxility. The way our DOS protection is that we have equipment on-site which monitors common DOS thresholds for a variety of traffic types. If any one of our volumetric thresholds are triggered we utilize BGP mechanisms to re-route the affected prefix (ip range) through Voxility. At that point, all internet traffic will flow through Voxility which will scrub any bad traffic and only pass through what they consider to be clean traffic.
Our protection is resilient
We use Out Of Band (OOB) connections to Voxility in order to ensure that if our own equipment is rapidly overwhelmed by some volumetric attack, we will still have a clear line of communication with Voxility in order to facilitate the BGP updates and rerouting required to mitigate the attack.
Outgoing Traffic Monitoring
In addition to incoming volumetric attack monitoring we have outgoing traffic monitoring. These monitors look for bad behavior from our customers such as network scanning and brute force attacks against machines on the internet. There is a variety of sensors here which either trigger automatic blocking and alerting, or alerts our NOC team to investigate and take action if need be.
Further traffic filtering and DOS mitigation
If your server or website is being subjected to low-level brute forcing or bot scanning or other types of attacks which do not trigger our automated high-volume DOS protection, you should look into the wide variety of options available to you, ranging from fail2ban, proper firewalling, WAF protection with Cloudflare, Bot protection with Botguard etc. - we have a number of articles in our documentation on these topics.
Related articles
-
Troubleshooting network problems
-
How to run network speed tests on your Webdock server
-
Server IP Adresses
Read all about how IPs are assigned to your Webdock server and how to manage them.
-
How to point your domain to your server using DNS
-
Webdock uses Google DNS with Cloudflare as backup
Wwe have decided to make Google our primary and Cloudflare our backup.
-
Servers with no IPv4 networking (IPv6 only)
In this article we tell you about Servers with no IPv4 networking (IPv6 only).
-
Using Looking Glass to test latency and network speed
A short article outlining the steps to check latency and network speed of Webdock servers.
-
Private Communication Between Your Webdock Servers using Tailscale
Creating a VLAN-like environment using Tailscale
-
What To Do If Your Webdock IP Address Is Incorrectly Geolocated
A short article to help you with fixing incorrect geolocation information of your server IP