I’ve been planning to DDoS test my own site to see the capacity of my site, but gave up at last cause I saw this word of advice:

DDOS attack does not magically reach to the target. It will violate many innocent network infrastructures.

If this is true, then this test means I may even face accusations from those infrastructure providers for the damage to them.

I wonder if this is true, can anyone help me?

  • 2
    This is not a good idea. The way traffic is routed over the Internet could impact multiple networks, and is surely against the terms of service for your ISP and web host. Use a reputable CDN (many of which are free) to protect your site against DDoS attacks and don't worry about it, that's what they specialize in. – dan Nov 16 '19 at 5:26
  • @dan Sounds like an answer to me! Cheers!! – closetnoc Nov 16 '19 at 5:36
  • @closetnoc - many stress-test services (which even remain mysterious whether they are legal) on the internet (at least when I Google there's countless at top of the pages) may mislead website owners to "try DDoS their own sites to test traffic capacity". Website owners without much knowledge may suppose the DDoS only affects they themselves. And they will try to use such stress-test services and damage their host against the TOS unintentionally. That's really bad. – gudako Nov 16 '19 at 5:39
  • Welcome to Webmasters! I agree. I was a web host from the very beginning of the Internet. DDoS testing is not something you want to do. I was a consultant for all the major telecoms at the same time. We used to be able to isolate our servers to load test and perform intrusion testing. If you host with a company, you cannot do either. Some of the commercial hosting companies can do this for you. But these hosting options are extremely expensive and not available to the public for general websites. At BT, we continually tested customer sites on our red LAN without issues. Cheers!! – closetnoc Nov 16 '19 at 5:50
  • @closetnoc - So you (or your company) are running your own servers, and your own hosts. Doing stress-test agreed by you (or your company) will not damage other companies. – gudako Nov 16 '19 at 6:01

I disagree with comments for one main reason, no one asked how will this DDoS be carried out? If you're planning to use hacked network then yes, it is a bad idea as it puts a lot of stress on the network but also let's face it, 5-10 minutes of heavy traffic never killed anyone.

If you are planning to use AB tools from Apache (follow guide here https://stackoverflow.com/questions/12732182/ab-load-testing) then there is absolutely wrong with it and although it will not show you how the website will perform under real stress it is usually a very good guidance for the website performance.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.