opinion

Bits and Bytes: Slaying the DDoS Dragon

Bits and Bytes: Slaying the DDoS Dragon

If you’re tired of seeing folks get hit by DDoS attacks and then incurring costly fees from providers, fortunately, the landscape is changing; DDoS attacks are being handled differently today than they have been in the past.

For those who have been lucky enough to escape any attacks or who may have only seen the term used in an article, a DDoS is a Distributed Denial of Service attack. This means that an attacker will use thousands or even hundreds of thousands of compromised servers, personal computers or (especially recently) IoT devices like cameras and smart doorbells to send countless fake network packets to a server.

Zombie devices create incomplete network handshakes and other technical packets, which consume server resources and saturate the network. Under these circumstances, legitimate requests cannot make it across the web while being crowded out by attack traffic.

The long-term resolution for DDoS attacks is for reputable hosting companies, ISPs and other security companies to work together to identify and block the operators and perpetrators of these attacks. However, a harmonized and integrated solution across multiple providers and platforms is a long journey away. Until then, customers require an immediate response to keep their sites up and running.

One solution to a DDoS attack is to provide such enormous over-capacity that a website can absorb any attack, but this is a highly inefficient process and is part of what makes some DDoS protection services so expensive. You can imagine a DDoS as many tiny streams meeting to form tributaries and then finally a massive river of attack traffic. Trying to build a dam across a gigantic river is a giant and expensive undertaking. However, building numerous little dams across smaller streams is much easier and will just as effectively stop the entire river.

That is the concept for always-on network-level DDoS protection. Rather than trying to solve the problem with a single massive solution, this cooperative effort with other global networks effectively blocks the little streams of attacks closer to where they originate. All of this occurs without sacrificing even a single millisecond of latency under normal conditions.

To effectively solve this dilemma (without latency), it requires turning to a technology that has taken years to perfect: advanced statistical modeling and automatic management of routes and network peers. This “smart routing” is the magic that avoids trading speed for safety and protection.

While the internet is a massively interconnected series of networks (much like a big city), there are many strategies to navigate it. Think of “smart routing” like a local cab driver who knows when to avoid certain roads and what shortcuts to take instead. This system continually takes samples from all incoming and outgoing traffic and automatically optimizes the data routes across the internet.

Instead of these calculations just making data faster, it also provides a critical piece for a cutting-edge DDoS protection system. By examining historical and real-time performance data, it is easy to detect when a DDoS attack starts, the origin and the target victim.

This means that when an attack commences, the network can instantly direct just those IP addresses under attack through the edge DDoS protection stations. When there is no attack, traffic is routed over the highest speed links, skipping the DDoS protection edges and taking the best and fastest routes. Instead of building bigger highways to handle more cars, it removes the vehicles that have no purpose being on the road.

While this advanced DDoS “scrubbing” technology prevents volumetric attacks, services can complement it to scan for more intelligent threats like SQL injection, bots and scrapers. While there are companies generating millions of dollars in profits from DDoS protection, given how prevalent and damaging these attacks are, we offer it to clients as a basic free service.

Regardless, when a customer gets a server from their favorite web host (whomever that might be), we believe they should have a consistent, fantastic experience and focus on building their websites without having to worry about DDoS attacks. We also hope that doing the right thing will be contagious one day (but not like COVID). Because that’s good mojo.

Brad Mitchell is the famed founder of MojoHost, which has won numerous XBIZ Awards for Web Host of the Year and earned many loyal clients for nearly two decades. Known for his dapper style and charismatic wit, Mitchell is a regular fixture at trade shows, where he frequently shares hard-won wisdom while striking profitable deals. And because he really loves clients, he offers protection against DDoS for free as part of his service. Contact him at brad@mojohost.com to learn more.

Related:  

Copyright © 2023 Adnet Media. All Rights Reserved. XBIZ is a trademark of Adnet Media.
Reproduction in whole or in part in any form or medium without express written permission is prohibited.

More Articles

profile

WIA: Sana Gaziani

Sana Gaziani has always been industrious. She worked in retail for over 20 years, first as a teenager selling chocolates door-to-door and then in multiple part-time jobs at grocery stores. She worked at cosmetics company Lush to put herself through college, where she studied to become a law clerk.

Women In Adult ·
opinion

Ensuring Subscription Billing Is a Win-Win for Businesses, Customers

Subscription billing is one of the fundamental cornerstones of our industry. Marketing practices and processing technologies have evolved, but the basic concept has remained unchanged.

Jonathan Corona ·
opinion

The Importance of a Modern Tech Stack

You’ve built your website or platform. It is a fantastic piece of software, it works — and even better, your customers love it. You’re done developing, so now you can fire all your developers and not renew your contractor agreements. Right?

Brad Mitchell ·
opinion

Unpacking Mastercard's Enhanced Communication Path

Sharing information is important between card associations and service providers like payment facilitators and independent payment operators. In those relationships, information typically flows from the card brands to the acquirers, and then to service providers.

Cathy Beardsley ·
trends

Piracy Battlefront: Content Protection Watchdogs on Evolving Threats, Solutions

Thanks to the creator economy, the rise of indie paysites and a cross-pollinating ecosystem of affiliates, studios and multibrand behemoths flooding the internet with billions of photos, videos and text messages, there has never been such a treasure trove of adult content online. But where there is treasure, there are pirates.

Alejandro Freixes ·
opinion

A Steady Pace & Realistic Goals Are Vital for Empire Building

I’ve seen countless websites and businesses fail to launch because the project exceeded the budget for development, and nothing was left for marketing or building a team. The dreaded cash crash.

Juicy Jay ·
opinion

Unveiling the Future With Mastercard's New AI Rules

As technology advances at an unprecedented pace, the role of artificial intelligence (AI) in driving innovation across industries has become crucial. The financial services sector, in particular, has recognized the potential of AI to improve efficiency, accuracy and customer experience.

Jonathan Corona ·
opinion

Eyes on the Site: Strategies for 24/7 Website Monitoring

Back in the 1990s, there were all sorts of companies that would scan your website and let you know if and when it ever went down. Ah, the memories. Site monitoring has since advanced far beyond those humble beginnings. Today, most websites are more complex, and checking whether one is online or not is not as simple as it used to be.

Brad Mitchell ·
opinion

Understanding Visa's New Pricing and High-Risk Tiers

In April, Visa announced that it was rebranding its Global Brand Protection Program as the Visa Integrity Risk Program (VIRP). The program is designed to strengthen the integrity and security of the Visa payment system.

Cathy Beardsley ·
profile

WIA Profile: Caroline Karolinko

When Caroline Karolinko joined Segpay in 2018, she did not know a lot about the adult industry. After graduating from the University of Florida with a master’s degree in speech-language pathology, she worked with autistic youth and others with behavioral disorders.

Women In Adult ·
Show More