So ok, right now my windows 2003 dedicated server is under attack by some guy who's flooding UDP packets (~90.000 packets/sec) on my 100Mbps server for the last 8 hours.
I'm on a shared port, so I'm guessing there is one 100Mbps router, or cable shared with about 50 to ~100 other machines on the same network. (I guess all of them suffer from this attack too)
When I'm having this attack, it's eating ~90% of my network (I seet it in the taskManager) but nothing changes in the CPU... Cuz does UDP packets are not targetting any application in my server, the're just random packets.
My hosting company said that I could buy some software or hardware solutions, and they said it could work. And that upgrading to 1Gbps internet speed won't do any good.
I think they're wrong.
Since 100 Mb/s is all what that shared port can handle, if I buy a cisco hardware firewall (~400$) it will just not send bad trafic to my machine, but the port will still be busy and full of maximum trafic from the DDoS, which I think will still be slowing down my server anyways.
And software solutions is just stupid, I don't see how it could help in this case.
I'm I wrong here?