Best layer7 protection

M

MaGicSuR

Member
Apr 27, 2016
5
2
35

Hello Everyone.
Today I am going to share with you my opinion about best layer 7 protection.
​
#1 CloudFlare.com
​
No serious protection. They are mainly focused on proxy things (to mask your ip). They provide JS challange which is their main protection against attacks., As I noticed it's being updated few times each month. Few weeks ago they pushed big update, which patched all the ddos script, but unfortunately it's still really simple JS challange so making new bypass for that can be hard only for laiks.
Captcha / Rate limit - That's their second protection. However captcha is good to stop ddos attacks, but for real people it's quite annoying. Also on the SST (Stress Service Testing) scene there is service that provide 100% working captcha bypass, which is working. Rate limiting also can be bypassed. Limiting requests per second, enough IPs and your website will be down.

#2 Nooder.net
​
In my opinion one of the best protections on the market. It's being upgraded each day. Developers are completely focused on their protection. They are using really advanced alghoritms to prevent ddos attacks on your website. Also there are no false-positive bans. In the future it will be one of most known layer 7 protection if devs will keep up their good work.

#3 Sucuri.net
​
One of the best protections on the market, but I have found really interesting bug in their protection, which allows me to down websites protected by them within few seconds.
It's a bit overpriced, but for serious projects it's quite good. Fast support, also they know what they are doing.

#4 BlazingFast.io
​
Nothing serious to be honest. Simple JS challange, which is easy to bypass. Wasn't updated for years. Wesbites protected by them can be easily downed.

#5 DDoS-Guard.net
​
One of the best layer 7 protections on the market. They provide JS challange with rate limiting. However JS challange is pretty easy to bypass, their rate limiting system can not be bypassed for now. As I assume they are detecting proxies/bots and simply banning them. Your website can be down for max. 2 minutes amd it will be up again. I can recommend this service to everyone.

#6 Combahton.net
​
They only provide "button" as a challange, which can be bypassed within 1 minute. No need any advanced alghoritms to bypass that. Minimal power will take it down.

#7 Cloud-Shield.ru
​
Similar to Combahton.net, not worth to buy. They provide cutom JS challange, which is not a problem to bypass.

#8 ArvanCloud.com
​

Simple "test cookie" protection. Takes up to 5 minutes to bypass it. Nothing serious.

#9 Nelax.it
​
Worst protection I ever seen. "Developer" is completely clueless.
624ab8fa4e858cbbe192412447db9e17.png


2020
 
Last edited:
Hunterpl

Hunterpl

Member
Mar 15, 2017
0
1
41
bryt3sIo said:
bad bro.
Click to expand...

Explain why is bad? We currently use in company works so good better than Cloudflare after when we get DDoS on L7 bypass CF even with under attack mode has been activated. Say " Bad Bro " it does not tells me nothing.
Stackpath have:

Live-chat with customers. +1
People who are working in StackPath they know what they are doing, very well.
Custom SSL free to upload not funny pack like in Cloudflare company force to show your custom SSL with option business for 200$ per month.

What's bad in there?
WAF/CDN not support IPv6 but DNS does.
 
Last edited:
Awlok

Awlok

Member
Jan 1, 2018
29
5
58
I never test stackpath, but i know much people using their services including valve corporation.
 
U

User_38581

I think you should add f5 also :)
www.f5.com

F5.com

F5 application services ensure that applications are always secure and perform the way they should—in any environment and on any device.
www.f5.com www.f5.com
 
M

mehmen4746

New Member
Dec 13, 2019
1
0
3
ArvanCloud now is very powefull
Do you know how to bypass it?
you mentioned it uses test cookie, what do you mean?
 
You must log in or register to reply here.
Top