DDoS Protection

Copy page View as Markdown Open in ChatGPT Open in Claude Open in Perplexity

#What Is a DDoS Attack?

A distributed denial-of-service (DDoS) attack is a type of cyber attack in which multiple compromised devices are leveraged to attack a target system with the goal of disrupting its regular traffic, or network service by overwhelming the targeted system, or its surrounding infrastructure, with a flood of internet traffic.

#What Are the Most Common DDoS Attacks?

DDoS attacks are typically carried out in two main ways: SYN flood and Amplified DDoS. A SYN flood is a form of DDoS attack in which an attacker sends a persistent succession of SYN requests to a target system, thereby consuming enough server resources to render the system unresponsive to legitimate traffic requests.

An amplification attack is a form of DDoS attack in which an attacker spoofs the target’s IP address to send relatively small queries to compromised systems. These queries elicit exponentially larger payloads, which are directed to the interpreted source: the targeted system’s IP address. Performed at scale, the excessive volume of traffic overwhelms the victim server, rendering the service unavailable to legitimate traffic.

Common examples of protocols attacked with DDoS amplification are DNS, CLDAP, NTP, SSDP, and SNMP.

#Cherry Servers DDoS Protection

Cherry Servers enables generic DDoS protection on all server deployments by default at no extra cost. This runs as an automated protection system that monitors each and every server on a network level.

The traffic of every server is regularly scrubbed from NTP, SSDP, CharGen, DNS and several others well-known DDOS attack vectors to limit vulnerability. In addition to this, the Cherry Servers network is monitored 24/7 by seasoned network engineers who are on standby ready to react with any means necessary to preserve seamless network operations.

On top of this, Cherry Servers automatically drops requests from IP addresses which are listed in Spamhaus and other advisory blacklists. In the event that your server is detected to have an abnormal level of traffic, we may react by temporarily suspending traffic as a safeguard.

#DDoS protection with Third-Party services

If you require additional DDoS protection for your server deployments, we recommend integrating a third-party service with your Cherry Servers instance. One such service is Cloudflare's DDoS protection for website filtering, which enables us to restrict incoming traffic to your server to only requests originating from Cloudflare.

Third party integrations can be implemented for an additional fee. For more information, please contact the Cherry Servers sales team at sales@cherryservers.com.

Was this article helpful?

Thanks for the feedback!