Hello guys, so I have been self hosting a bunch of stuff for some years now. But I want to increase the protection of the services I host.

I was thinking of using a VPS just for ddos protecting my services like game servers, web servers, email etc.

Any suggestion on how to set this up well? I was thinking of routing all traffic from the VPS back home with wireguard. My connection is gigabit so I don't think the performance impact will be too big, any suggestion on which proxy, VPS and other things to use?

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 4 months ago (1 child)

@kylian0087 @slazer2au “routing all traffic from the VPS back home” You’re back to square one as soon as you DDOSed yourself. Have you actually been DDOSed before? Are you somebody that attackers want to target? If you’ve never been the victim of an attack, and you’re neither large nor famous, it’s unlikely that you ever will. Your home internet connection can be DDOSed with or without services hosted on it, but it takes resources to attack something, so most attackers want a worthy target. That said, there are reasons to want a VPS. They are likely to have a higher uptime than your home services, so running something like email can ensure it stays up even if your internet/power go out. Similarly, it can be useful to have critical files stored there in case of a fire (as part of your 3-2-1 backup plan). For a game server, it can be useful for multiplayer because it may have lower latency to the other players. If you’re going to get a VPS, put your services on the VPS. If you’re going to rent a VPS to run a VPN, just save your money and use a VPN. If your internet connection isn’t constantly loaded, and you’ve never been attacked, and you’re not hosting a popular website, just save your money.

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 1 point 4 months ago

    Thanks for the detailed explanation. As my understanding about ddos protection goes. It is mainly needing the capacity to redirect bad traffic and let normal trafic true. not outright block it. So having that capacity in front of a 1gb connection shouldn't be a issue?

    Also I can't really put all my services on a VPS that cost would be way to high. A second option I have been thinking about is moving my servers in to a data center. But I like to be able to easily access them. My uptime is over 95% at home already due to having most things on a UPS (and a large home battery with more then enough solar) backups can still be improved which I do have planned. Multiple backups are already in place though.

  • source
  • parent