I think it's time I expand HF serving once again. Even though we're under DDOS protection, filters, and firewalls some of our old IPs (not all) are public. They cause disruption to our serving with massive attacks (3gb+) and while I can adjust and mitigate these they still manage to cause slight downtime and slow serving down.
I'm probably going to take some final steps to end this type of attack by ordering 3 new servers. One for mail and two more for apache/nginx. We'd have somewhere around 24 IPs to serve HF from. Of course this will increase our serving costs but these things are necessary.
Cloudflare does an amazing job of hiding our IPs as well as deflecting DDOS attacks. But a select few of our IPs are public and they are used to attack. With a new set of servers and IPs these attacks will be mitigated.
Currently HF has 2 servers and a CDN. After expansion we'd have 4 servers and the CDN.
btw here is last 30 days bandwidth to give you some idea of what I'm talking about.
[img]http://i.minus.com/i5VsgNdKDOfaU.PNG[/img]
Dec 14, 2012 02:55 PM
(This post was last modified: Dec 14, 2012 02:56 PM by Grammar Rays.)
Holy shit. I reckon you're right - especially with the Christmas break coming up.
EDIT: Have you asked your DC if they'll swap your IPs over? Just do that rather than buying a new one and just try and hide the new ones the best you can.
DO NOT DEAL WITH THIS MEMBER
Great, now people can stop complaining when HF goes down for 5 minutes.
Sounds great. It seems to me the attacks were getting worse of recent.
Are you replacing 2 servers as well or only adding 2 new?
Dec 14, 2012 02:57 PM
(This post was last modified: Dec 14, 2012 02:57 PM by Makaveli The Don.)
Hope this will stop childs from doing useless things and will give them more time to find a life.
Don't forget to attack life with violence, speed, momentum, butt naked sprinting down the dark alleyways not afraid, DONT EVER STOOP!! - Dr. Disrespect.
Dec 14, 2012 02:57 PM
(This post was last modified: Dec 14, 2012 02:58 PM by Moralitas.)
Downgrading server specs or same specs and just more servers? :P Same specs would be pretty awesome, but expensive as hell.
Quote: Hope this will stop childs from doing useless thigns and will give them more time to find a life.
It won't stop that.
Quote: Great, now people can stop complaining when HF goes down for 5 minutes.
People will always complain. :\
Thanks for the update Omni.
Hopefully the new servers can result in less downtime in the near future.
Yea, I agree with Anonymous, now people will stop complaining now, Thanks for updating us ;).
Thanks for taking the necessary steps Omni and it will surely help reducing HF's downtime.
Sounds fantastic. Any ETA on the new setup?
Looking forward to the much faster and smoother HF.
Who's going stop us now?
(Dec 14, 2012 03:02 PM)Morchid Wrote: Looking forward to the much faster and smoother HF.
Who's going stop us now?
The guys who finds the new IP addresses. 😉
Or people who have enough power to knock CloudFlare off.
Thank you for the updates to come. Hopefully this helps out a ton.
Quote:Are you replacing 2 servers as well or only adding 2 new?
We'd replace our current web server. The database server would not be replaced. My main concern is the changes required to sync the 2 web servers. Specs would likely be similar for the 2 new webservers but the dedicated mail server would have lower specs as it doesn't do much except mail 10k emails a day.
Quote:Sounds fantastic. Any ETA on the new setup?
Not really. My guess is within 60 days depending on what adjustments I can make now to keep us online. Long term it's what needs to be done but obviously on a short-term basis I can keep us online. I really just don't want to take the 2-3 days during the xmas season to set up servers.
I just setup the HackerCraft server too. :(
Pricing out each server it appears the cost will be around $700 but we'd replace a $350 server so we'd add about $350 to monthly serving costs. Or around $4k per year. HF is already well into the $xx,xxx range for yearly serving costs.
|
