Why buy another server?

[itsmie]

Ok back then when Omni rule HF, I remember he said about buying another server for HF. The reason is that if I'm not mistaken to avoid HF from DDOS attack.
Can someone tell me how does this happen?
Can we avoid DDOS attack by script? (noob question)

Thanks in advance.

[uber1337]

Not quite sure, but maybe if one server gets DDosed he can fix it while the other server keeps HF up and running. Otherwise I don't see how it would help.

[Grizzly]

No, it is so the database can be on one server, and the http can be on another. It allows less load to be on the server each quarry.

[Omniscient]

Having more hardware can be effective method if configured properly to prevent DDOS attacks. You can do load balancers, dedicated firewalls, and split up your database from your http server. Right now HF runs on 3 servers.

[itsmie]

wow 3 server that alot.....wonder how can i configure them

[Extasey]

They've got an image server running as well, ultimately reducing server loads.
He made a picture of how all the servers worked, and I can remember thinking how clever the setup was.

[Grizzly]

I'm interested in said picture, I haven't seen it.

[MarkW7]

I'd like to see the picture

Hats off to you Omni, you're a smart guy - how did you learn all this?

[manipulate]

Setting this up is pretty easy, I mean all you need to do is have MySQLd running on another box and reconfigure your website to connect to the new server, I never looked into how the whole image server thing works for HF, but I imagine Omni just changed the theme images directory, and possibly modified some MyBB code and got remote avatar uploads working, or he's using a NFS mount or something...who knows lol.

---

Back on topic, to my knowledge it's impossible to fully migrate a DDoS attack using _just_ a script, the most you can do is make the services that the packets are trying to hit ignore the packets, the most this will do is
1) lower server load (no processing of the packets)
2) save bandwidth (if the service tries to reply to the packets [http.etc])

Sure this sounds good, but the packets will still be going down the pipe and clogging stuff up, the most effective way is 'migrating' the attack using a dedicated firewall.etc