Teamspeak Protection - UDP Proxy?

[Ollie]

Hi,
So I currently run a Teamspeak Server for an Arma 3 community, and as salty people get angry the DDOS the teamspeak (the struggle with the gameserver because its hosted on OVH and their free online booter just doesn't work). The Teamspeak is hosted on its own server on another host.

I am looking for the best way to setup some kind of protection for this, my assumption was to buy a second server from a provider with better DDOS protection, and setup haproxy or something. Until I realised teamspeak is UDP.

What's the best solution to this?

 

[Weasel]

Probably the best idea is to switch your TeamSpeak server to OVH too.

 

[Ollie]

@Wess Sorry, think I wrote it wrong in my thread. The Teamspeak is on OVH already.

 

[Weasel]

@Wess Sorry, think I wrote it wrong in my thread. The Teamspeak is on OVH already.

And it's still being booted offline?

 

[MayoMayn]

By using

You must be registered for see links

Sent from my SM-G928F using Tapatalk

 

[Ecko]

By using

You must be registered for see links

Sent from my SM-G928F using Tapatalk

Please don't ever suggest such a shady "service" like that.

 

[MayoMayn]

Please don't ever suggest such a shady "service" like that.

Please provide some arguments before calling it "shady".

Sent from my SM-G928F using Tapatalk

 

[Weasel]

By using

You must be registered for see links

Sent from my SM-G928F using Tapatalk

Read their website before suggesting. They offer DoS protection, not DDoS protection.

 

[Ecko]

Please provide some arguments before calling it "shady".

Sent from my SM-G928F using Tapatalk

BitNinja is known for sending fake abuse reports and false positives in attempts to gain customers (orchestrated and admitted by joz awhile back as well). Any company that charges for IP delisting is not reputable. They list Arvixe as a client when no Arvixe server runs BitNinja.

 

[MayoMayn]

BitNinja is known for sending fake abuse reports and false positives in attempts to gain customers (orchestrated and admitted by joz awhile back as well). Any company that charges for IP delisting is not reputable. They list Arvixe as a client when no Arvixe server runs BitNinja.

I'm not paying for them neither lol, I'm just using their free service, as its better than most other services. If you compare Bitninja to CloudFlare DDoS mitigation, we both know which one is best.

 

[Ecko]

I'm not paying for them neither lol, I'm just using their free service, as its better than most other services. If you compare Bitninja to CloudFlare DDoS mitigation, we both know which one is best.

Yeah, Cloudflare.

 

[MayoMayn]

Yeah, Cloudflare.

CF's free or their 1st paid service can't even handle a 1gbps attack, so nah not really. If you got a booter, we can easily test it out.

 

[Ecko]

CF can't even handle a 1gbps attack, so nah not really. If you got a booter, we can easily test it out.

I have personally seen Cloudflare prevent a 600+ gbps cache bypass HTTP layer 7 DDoS that was doing over 75k HTTP requests a second.

 

[MayoMayn]

I have personally seen Cloudflare prevent a 600+ gbps cache bypass HTTP layer 7 DDoS that was doing over 75k HTTP requests a second.

And I've seen my personal hostings ARMS Anti DDoS service prevent more for only $5 a month, so why the hell bother to use a service that slows down your website even more.

 

[Ecko]

And I've seen my personal hostings ARMS Anti DDoS service prevent more for only $5 a month, so why the hell bother to use a service that slows down your website even more.

Let's see some logs of this attack that was over 600 gbps. Cloudflare routinely provides this information. Don't see anything from BitNinja about it. Considering the largest DDoS was from Mirai that broke 1 tbps took several hours to mitigate, I smell bullshit with the whole "my personal hostings ARMS Anti DDoS service prevent more".

 

[MayoMayn]

Let's see some logs of this attack that was over 600 gbps. Cloudflare routinely provides this information. Don't see anything from BitNinja about it. Considering the largest DDoS was from Mirai that broke 1 tbps took several hours to mitigate, I smell bullshit with the whole "my personal hostings ARMS Anti DDoS service prevent more".

When did I mention Bitninja in the comment you just replied to? This is a service attached to your VPS, so there's not any logs at all.

You must be registered for see links

Gonna translate it for you.
"iODC ARMS Anti DDoS*
Vi er de eneste i Danmark med mere end 500Gbps DDoS beskyttelse."

"We are the only company in Denmark with more than 500Gbps DDoS protection."

CloudFlare is literally the most overrated service that exists.

 

[Ecko]

When did I mention Bitninja in the comment you just replied to? This is a service attached to your VPS, so there's not any logs at all.

You must be registered for see links

Gonna translate it for you.
"iODC ARMS Anti DDoS*
Vi er de eneste i Danmark med mere end 500Gbps DDoS beskyttelse."

"We are the only company in Denmark with more than 500Gbps DDoS protection."

CloudFlare is literally the most overrated service that exists.

If there are no logs, then how do you know a DDoS attack was prevented? Makes no sense. You can dislike Cloudflare all you want, don't really care about that, but don't go telling people to use scammy shit like BitNinja.

 

[MayoMayn]

If there are no logs, then how do you know a DDoS attack was prevented? Makes no sense. You can dislike Cloudflare all you want, don't really care about that, but don't go telling people to use scammy shit like BitNinja.

Rather go with a service that works better, than using piece of shit CloudFlare providing unrealistic bad SSLs and server optimization that just slows down speed even more.
Every website that I've seen using CloudFlare is slower than my grandma trying to walk past people in malls. Devbest and shitty habbo retros are some good examples.
If you recommend CloudFlare, you don't really know shit about protection or speed.
How did I know it worked? Because I literally saw the attack with my own eyes lmfao.

 

[Ecko]

Rather go with a service that works better, than using piece of shit CloudFlare providing unrealistic bad SSLs and server optimization that just slows down your DNS even more.
Every website that I've seen using CloudFlare is slower than my grandma trying to walk past people in malls. Devbest is one good example.
How did I know it worked? Because I literally saw the attack with my own eyes lmfao.

"unrealistic bad SSLs". Sure, whatever you say buddy.

Website is slow on CF, and then uses this forum as an example:

root@autobots [~]# for i in {1..10}; do time curl -I https://devbest.com | grep real; done
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.196s
user    0m0.035s
sys    0m0.010s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.173s
user    0m0.034s
sys    0m0.011s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.164s
user    0m0.039s
sys    0m0.006s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.169s
user    0m0.035s
sys    0m0.009s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.175s
user    0m0.035s
sys    0m0.011s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.194s
user    0m0.038s
sys    0m0.006s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.177s
user    0m0.036s
sys    0m0.008s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.162s
user    0m0.033s
sys    0m0.011s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.168s
user    0m0.035s
sys    0m0.009s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.157s
user    0m0.034s
sys    0m0.010s

yeah, real slow there.

you saw the DDoS with your own eyes, but don't have any logs, yeah that makes sense. If you're not capturing any network traffic in realtime (tcpdump, wireshark, w/e), then you didn't see anything.

 

[MayoMayn]

"unrealistic bad SSLs". Sure, whatever you say buddy.

Website is slow on CF, and then uses this forum as an example:

root@autobots [~]# for i in {1..10}; do time curl -I https://devbest.com | grep real; done
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.196s
user    0m0.035s
sys    0m0.010s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.173s
user    0m0.034s
sys    0m0.011s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.164s
user    0m0.039s
sys    0m0.006s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.169s
user    0m0.035s
sys    0m0.009s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.175s
user    0m0.035s
sys    0m0.011s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.194s
user    0m0.038s
sys    0m0.006s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.177s
user    0m0.036s
sys    0m0.008s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.162s
user    0m0.033s
sys    0m0.011s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.168s
user    0m0.035s
sys    0m0.009s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

real    0m0.157s
user    0m0.034s
sys    0m0.010s

yeah, real slow there.

you saw the DDoS with your own eyes, but don't have any logs, yeah that makes sense. If you're not capturing any network traffic in realtime (tcpdump, wireshark, w/e), then you didn't see anything.

That is pretty fucking slow.