How often do you hear - “Does Cloud really save money?”

[HPlum78]

Yeah expensive when you are in the realms of 50 pb, should have been clear around the sizing in my initial post!

[mavhc]

It's much like hiring people, if you have 0.5 of a job to do can't hire someone full time, if you have 1.0 jobs to do you have no backup when they're sick. If you have 10 people you can manage when 1 is off

[2097]

How does "Cloud" backups work when a school is being bombarded with constant ddos attacks ?

[elsiegee40]

We have one very sound example on EduGeek of Cloud backup saving a school’s bacon after it burned to the ground

 

This one at @DSapseid ’s school

http://www.edugeek.net/forums/general-chat/173744-someone-fancied-brand-new-network-fire-west-sussex-school.html

[mavhc]

How does "Cloud" backups work when a school is being bombarded with constant ddos attacks ?

 

Depends how the attacks are working. If you set your firewall to ignore all incoming traffic that would probably fix a lot of problems. If that fails you'd have to talk to your isp about dropping incoming traffic.

[2097]

Depends how the attacks are working. If you set your firewall to ignore all incoming traffic that would probably fix a lot of problems. If that fails you'd have to talk to your isp about dropping incoming traffic.

 

We have DDOS protection , but mitigation obviously still affects us .

 

Most schools have sub 500mbit connections , any floods will overpower the line so internal firewalls will be no use and will require ISP intervention. ISP's ( where you haven't bought protection) will not be interested in helping.

[mavhc]

Floods of what? ping? tcp? udp?

[2097]

IP Fragmentation,

 

Total Traffic,

 

UDP

 

Thats what a Free Web based DDOS does to us, it doesnt affect our internal network

 

Heres a bit more

 

9,993.0% of 500 pps

702.5 Mbps, 76.7 Kpps

 

Our Mitigation kicks in , but can still take around 20 secs

[mavhc]

Does that affect your upload speed much?

[2097]

Does what affect it ? being DDOs'd or being behind mitigation ?

 

If we didnt have DDOS protection we wouldn't be able to upload or download with an attack of that size.

 

Once mitigation is done ,our speed is still affected until the DDOS has stopped.

 

Luckily we have caught the culprits a few times so it doesnt happen very often.

[mavhc]

I'm wondering what causes the upload to not be available while being DDoS'd. Processing power of the router/firewall perhaps.

[Atomic_Zombie]

Processing power is the big thing, even when rejecting / dropping packets it still has to process them in some way.

 

As a pseudo-ISP we have switched over schools to a different external IP while asking the ISP to blackhole the traffic for a few days / weeks.