Although the Hong Kong server rental service has many advantages, it still faces the risk of DDoS attacks all the time. While you can't completely block all malicious requests from DDoS attacks, you can take the following steps to help relieve the strain your server is experiencing.
• Implement rate limiting with edge routers. This will limit the damage each IP can do.
• If possible, utilize an upstream routing protocol (such as BGP) to instruct your ISP to block IPs before reaching the edge.
• Implement Regional Blocking - Looks up legitimate customer segments by region and blocks all other regions.
• Reduced timeout limits for open connections at the Web server level and at the operating system level. Also, implement smart keepalives (like NGINX) if your web server supports it.
• Deploy a proxy or CDN to offload large, resource-intensive parts of your site.
• If using Linux, lower the drop threshold for SYN, ICMP and UDP requests in sysctl.conf.
• Increase the number of clients (Apache) or equivalent to handle the additional legitimate and illegal traffic your application or website will receive.
• Utilize services such as CloudFlare, or other Layer 7 DoS mitigation providers with extensive experience and machine learning capabilities to allow their networks to better detect malicious traffic.
During an attack and while these changes are being made on your server, you should contact your hosting provider or upstream ISP as soon as possible to find out. Chances are they are aware of this attack and have already begun to use their expertise to provide you with the next defense measures. Therefore, your Hong Kong server hosting provider needs to have a strong product and reliable support to protect you in the event of an attack.