News for hackers. Stuff that matters.

A comment on Ask HN: How do you securely self-host a server?.

Re:Ask HN: How do you securely self-host a server? by explaingarlic on Wednesday March 09, 2022 @03:55PM (#30619825)
As far as DDOS protection goes, I'd like some tips there. Also, a question - if I have a 1Gbps home connection am I strictly screwed if someone is sending a little more than 1Gbps to me UDP-wise? It's the kind of question that seems simple but I've never been able to make my own simple answer.
[ Parent | on HN ]
Re:Ask HN: How do you securely self-host a server? by water8 on Wednesday March 09, 2022 @09:21PM (#30622532)
Your only option is block the IP addresses but if its a large botnet or a reflected attack it may not be possible
[ Parent | on HN ]
Re:Ask HN: How do you securely self-host a server? by BenjiWiebe on Wednesday March 09, 2022 @11:17PM (#30623165)
Blocking the IP at your router won't help if your router's upstream is saturated...
[ Parent | on HN ]
Re:Ask HN: How do you securely self-host a server? by water8 on Wednesday March 09, 2022 @11:41PM (#30623283)
Why are you saturating your own link? You control your upstream unless you've already been breached or there is a vulnerability in your router firmware
[ Parent | on HN ]
Re:Ask HN: How do you securely self-host a server? by warrenm on Thursday March 10, 2022 @09:06AM (#30626998)
I don't think you're using "upstream" the way parent does (and the way everyone else I know uses it)

You only control what you're uploading

You have no control of what is upstream of the router (ie your carrier and beyond), since you're downstream of that

[ Parent | on HN ]
Re:Ask HN: How do you securely self-host a server? by explaingarlic on Thursday March 10, 2022 @05:53PM (#30633715)
If someone is sending me 1Gbps at layer 3, doesn't that just saturate my link to my ISP (and therefore the open internet) anyway? Regardless of whether I block it with my router?
[ Parent | on HN ]
Re:Ask HN: How do you securely self-host a server? by killingtime74 on Wednesday March 09, 2022 @04:11PM (#30620013)
Are you opposed to using Cloudflare or other DDOS providers? I’m not sure what can be done on a small budget
[ Parent | on HN ]
Re:Ask HN: How do you securely self-host a server? by explaingarlic on Thursday March 10, 2022 @05:56AM (#30625527)
I meant more for the usecase of having a public endpoint. I don't like the idea that my only option is to hide my endpoint as the origin of a CDN in order to prevent it from being saturated with traffic by a digital ocean droplet.
[ Parent | on HN ]
Re:Ask HN: How do you securely self-host a server? by aaaaaaaaata on Wednesday March 09, 2022 @04:12PM (#30620027)
Theoretical max upload is always just below the other side's max download.
[ Parent | on HN ]
Re:Ask HN: How do you securely self-host a server? by explaingarlic on Thursday March 10, 2022 @05:52PM (#30633708)
What do you mean? Plenty of people are on 30Mbps connections and I have more than triple that in upload.
[ Parent | on HN ]