I'm behind SYN FLOOD with Spoofed IP'S

[midulc]

Have optimized ALL centos configuration based on all I could find on internet and the ddos still gets my ded down.
The cpu use goes full and the conection usage to 250 mbps. There are lots of SYN_rECEIVED packets.
There's no way to stop this... What to do?
Internet connection is 10gbps so that's not the problem, it's that cpu usage goes to the limit.

[NiteWave]

can you identify which process has high CPU usage, by "top -c" etc?

ddos usually last short time only, is your website DDOS'd continuously?

[midulc]

It's continuously behind a DDOS. I can't run that command as now the dedicated got blocked for so many traffic

[webizen]

again, you can order "Advanced Anti-DDoS Setup"
https://store.litespeedtech.com/store/cart.php?gid=5

[midulc]

I even set up the iptables to block ALL ALL THE REQUESTS ALL, iptables -i INPUT -j DROP and still got behind attack!

Conclusion: External firewall is the only solution.

[webizen]

or you can try our free service.

http://www.litespeedtech.com/litespe...y-service.html

[webizen]

Originally Posted by midulc

...

Conclusion: External firewall is the only solution.

This is not necessarily true. Really depends on how iptables is setup.

[semprot]

Originally Posted by webizen

again, you can order "Advanced Anti-DDoS Setup"
https://store.litespeedtech.com/store/cart.php?gid=5

I wonder if it is the same one as "LiteSpeed Anti-DDoS Appliance" here ?
http://www.litespeedtech.com/litespe...appliance.html

[webizen]

Originally Posted by semprot

I wonder if it is the same one as "LiteSpeed Anti-DDoS Appliance" here ?
http://www.litespeedtech.com/litespe...appliance.html

They are different. LiteSpeed Anti-DDoS Appliance is more advanced dedicated device to handle larger attacks.