DDoS Attack Wizard: the host already null-routed the address

When the request is ddos attack wizard, we look at the live site first. The check we expect to matter is: the host already null-routed the address.

A specific fault, not a slogan

• The host already null-routed the address
• Customers are calling and the public page has no explanation
• Cloudflare is not in front of the site, so every request hits the host
• Only one site on the account is down

What gets checked

If the site fell over under a flood of requests, the owner's job is the host and the front door, not a fight with the traffic. We look at whether the host is dropping the site, whether Cloudflare or the host can absorb it, and what to tell customers while it is down.

• A short status you can send to customers that does not invent a cause
• Who is allowed to change DNS
• A page that fails because of the application rather than volume
• That mail and other DNS records will survive a proxy change

What you can send first

We will not sell a way to aim traffic at someone, and we will not tell you to pay a stranger who wrote during the outage. The practical tools are the host and a front door such as Cloudflare, set up so mail still works.

Call the host and find out if they have null-routed the address or if the application is simply crashing. Those are different problems and they do not have the same fix.

If you are outside Toronto, the call is the same. We say what we found and what the work is before we change the site.

Call 905-426-1784. We look at the site and tell you what the work is before it starts. The service page for this is DDoS help for site owners.