Category Archives: DDoS mitigation

php.net powered by myracloud.com

The official PHP.net site is now powered by myracloud.com. Thanks to Rasmus Lerdorf and Dan Brown for the support. php.net is hosted on a server in California. We have nodes very nearby which load content, optimize it, and then deliver it either directly to clients or send it to myracloud nodes in other parts of the world in a highly compressed format.

notebooksbilliger.de now accelerated by myracloud.com

Germany’s third largest online retailer notebooksbilliger.de is celebrating its 10th anniversary, and because of daily spikes in legitimate traffic it is now relying on myracloud.com to deliver even better performance to its customers. With myracloud’s built-in high-performance caching the load on the application servers has been improved significantly, so that even more parallel user sessions can be handled. myracloud serves millions of requests each hour directly without these requests affecting the customer’s infrastructure.

About notebooksbilliger.de: In 2011 notebooksbilliger.de AG revenues exceeded 460M EUR which placed it behind Amazon.de, Otto.de, and the now defunct Neckermann.de.

myracloud proves itself in DDoS attack

Just 48 hours after going live, we have observed the first major event. A customer, one of the most well-known sites in Germany, was being attacked at around 10pm. They went live on myracloud only 45 minutes later. The attackers then switched tactics to sending traffic against the hoster’s nameservers, one of Europe’s top addresses. These nameservers went down instantly. The customer then also switched his DNS to us, and has been up ever since.

myracloud provides DDoS-proof DNS and HTTP/HTTPS services.

We absolutely love myracloud, and we are confident that you will, too. Try myracloud today.

myracloud is live

myracloud the premium ddos-protection and content delivery optimization platform is live. Make your website faster today with myracloud for free. Congratulations to our great team who has delivered an amazing platform in a very short time (with the help of a lot of coffee and pizza :-) ).

We will add some more exciting information about myracloud very soon. If you have any feedback, please let me know (sascha@soprado.de).

DDoS Mitigation Made in Germany

According to Kasperky Labs, 25% of all attacks against websites are conducted against online shopping sites.

After witnessing quite a few of these DDoS attacks against our customers, we have created a filtering/scrubbing solution called MyraCloud. MyraCloud uses intelligent routing algorithms to distinguish services such as HTTP and DNS, and to separate bad from good traffic. These algorithms allow us to instantly filter out unwanted traffic in the backbone already. This protects our customers, and the Internet itself.

By additionally using Anycast routing technology attack traffic is diverted to the nearest filtering/scrubbing center. This makes attacks on our infrastructure much, much harder. Anycast works by sending traffic to the nearest data center, instead of sending it half-way around the globe. Traffic is cleaned locally instead of potentially negatively affecting users globally.

myracloud is already deployed for a number of customer sites. Please contact us if you are interested in trying out MyraCloud.

What is “DDoS”?

DDoS means Distributed Denial of Service and usually refers to many devices (e.g. personal computers or servers) attacking a target through a network. There are many different types of attacks which can be used to exhaust resources. Because these resources are used up by the attacker(s) the service becomes inaccessible to legitimate users. Hence it is called “denial of service”, and since it is distributed, we call it “distributed denial of service” or short DDoS.

A DDoS usually targets a particular level of the OSI layer.

Well-known attack types on OSI layer 3/4 are:

  • ICMP smurf (pinging broadcast addresses so that one packet is reflected by the network into many packets, very old and rarely used)
  • SYN floods (overflowing the half-open connection table of the operating system)
  • DNS amplification attacks (using open recursive DNS servers to amplify a small packet into a much larger one)
Attacks on the application layer 7 are for example:

  • Aggressive HTTP exhaustion (repeatedly requesting a resource from a web server)
  • Less aggressive HTTP exhaustion (opening many parallel connection, and only sending bytes very slowly, but still using up all resources of the webserver)
  • SQL injection attacks
  • CRSF
  • Cross-Site-Scripting
myracloud prevents all these attacks, and more. Check out myracloud the DDoS protection suite.