More bandwidth is not DDoS protection. A serious hosting setup needs:
- Upstream network mitigation
- Protection for Layers 3, 4 and 7
- Rate limiting and a properly configured WAF
- A hidden and restricted origin IP
- Real-time monitoring and automatic response
- A tested incident plan
A CDN alone will not save an exposed or poorly configured server. Neither will scaling after the attack has already started. The real question is simple: if an attack begins right now, does your infrastructure respond automatically, or does everything depend on someone noticing?
https://i.redd.it/4mo0fer90xqh1.png
Source: r/hosting_area · by /u/ench-hosting