For your company this means: an honest analysis of which attacks realistically affect you, a protection concept that fits budget and application, and the implementation, whether by hardening your existing systems, moving to protected infrastructure or a combination of both. In an emergency I help during an ongoing attack.
What is included
- Analysis of ongoing or past attacks based on logs, flow data and packet captures: type, volume, target, weakness
- Protection concept with evaluation of providers and measures: scrubbing, anycast networks, web application firewalls, rate limiting, geoblocking
- Terabit-class protection for servers, game servers and websites in the network of KernelHost GmbH in Frankfurt, with mitigation profiles for more than 40 games and services
- Protection for servers at other providers or at your own sites via KernelHost GmbH on request, when a move is not possible
- Hardening of Linux servers against layer 7 attacks: rate limiting in nginx and HAProxy, Fail2ban, SYN cookies, kernel parameters, caching
- Web application firewall and bot filtering with ModSecurity, BunkerWeb or Cloudflare, protection of login pages and APIs
- Emergency help during ongoing attacks: immediate measures, filters, redirection to protected infrastructure, communication with provider and customers
- Follow-up: report, evidence for insurance or criminal complaint, permanent protective measures and monitoring
Typical assignments
- An online shop is extorted before the Christmas season: move behind terabit-class protection within one day, the attack runs into the void.
- A game server operator loses players due to lag: the analysis shows layer 7 floods, a mitigation profile and rate limiting solve the problem.
- The login page of a customer portal is flooded with thousands of requests per second: web application firewall, rate limiting and bot filtering.
- A company with its own connectivity has a protection concept created and the resilience of its services assessed.
Process
Request
Describe your needs briefly via the form, WhatsApp or the live chat.
Assessment
Within one business day you receive an assessment with effort, price and a proposed date.
Implementation
I do the work personally, remotely via secured access or on site, and keep you updated throughout.
Handover and invoice
Documented handover, then an invoice from KernelHost GmbH with convenient payment via kernelhost.com.
Questions about this service
How quickly can you help during an ongoing attack?
Via WhatsApp or phone usually within an hour. First measures such as filters, rate limiting or switching to protected infrastructure often take effect within a few hours, a complete move into the network of KernelHost GmbH is possible the same day depending on the application.
Is a service like Cloudflare enough?
For websites often yes, if it is set up correctly and the origin address stays hidden. For game servers, VoIP, mail servers and custom protocols you need protection at network level, as KernelHost GmbH offers. I check what you actually need.
Do we have to move our servers for this?
Not necessarily. Many attacks can be absorbed through hardening and a web application firewall. For volumetric attacks in the high gigabit range, a location with scrubbing is the only reliable solution, then a move or protection via KernelHost GmbH is worthwhile.
Remote for companies across Germany, alignment via video call, ticket or chat.