If the hosting has CoPP (Control Plane Policing) in use on their Cisco Routers (assuming they use Cisco), it can help with router and network stability during an attack. Really, the attack needs to be stopped before it reaches the server so that it isn't causing too bad of issues for the host service to make them want to drop you. I am sure there are other ways to help mitigate attacks, but DDoS attacks are definitely among the hardest to fight due to their nature.
Personally, I think the best defense for an attack is to reduce anything that might provoke an attack as much as possible. As far as I know, P1999 was the original target of the attack, and being that it was hosted on the same service/box as the LS and Website, it made P1999 and the LS/Website both potential targets. I am not saying that P1999 should be run on a completely separate box/hosting service from the LS/Website, but I have to wonder if the LS/Website issue would have occurred at all if P1999 was hosted elsewhere. If the new hosting service is that much better that this is no longer a concern, then there should be no more issues with it. Just something to consider, though.
BTW, many thanks to Rogean and anyone else who helped to get everything back up and running again. The LS itself was only down for a short period after the hosting was canceled and that is the most important part of this project. And, considering that the server had to be relocated and dealing with finding new hosting and getting everything running on it, it was restored fairly quickly as well. So, good job on all of that.
|