What does it take to do stress testing on a website?
I am a developer and just start to learn things in DevOps and Testing area. So this question might sound too simple, but it's really hard for me.
I am reading articles about load and stress testing to find out the upper limit of my website. I haven't done any tests so far, but I'd like to get some ideas about the following question:
If I'd like to do a stress test on a website running on a cluster with x cpu cores and y Gigabytes memory in total, how many cpu cores and memory do the test device (or test cluster ???) have to have? Please give me some real world data.
PS: I really have no experience about this, any comments are appreciated. Thank you guys!
By the way, is Jmeter the most popular tool in this area? Any other quicker and easier tools?
Edit: If a small test computer can take my website down, doesn't that mean my website is very vunerable? Because any malicious user can just run stress test on my website on their laptop to crash my website...

