Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

DDOS and Slowdown

(Jun 21, 2010 09:34 AM)Omniscient Wrote:  I fight DDOS attacks myself. This one is being handled by the server just fine. It's about 400-500k packets per second. Anyone will less experience would be down right now.

At least we dont have those french annoying hackers like last month or a few months ago that HF wouldnt even load.
It is not that bad, imo. We've had worse.
Lmfao, just got my new internet.
It takes like 3 seconds to load, nice work Omni.

Just filter the IP's ?
(Jan 23, 2011 09:18 PM)Swag Wrote:  And sometimes when I'm kissing my girlfriend between classes (we get into it, like for real) I get a nice stiffy, so I pull her against me. So when it's not poking the front of my blue jeans, it's poking my girlfriend.
Their failure is your success always :)
Great job.
Great !! :)
also does the cloud hosting helps share the ddos load?
[Back after a long long time! ]
It's not a matter of filtering the IP's. The traffic will still hit the server at the firewall level. The slowdown we do have is simply the firewall reviewing each packet an figuring out who is legit. As you can see from screenshot the server is not overloaded at all. Load is at a very normal 1.6 right now.

The packets are empty anyways and aren't doing anything but hitting port 80. They appear to be incomplete fragments probably with malformed headers.
(Jun 21, 2010 09:08 AM)Omniscient Wrote:  Right now we have a 80mbps attack on the server. So it takes a while for the site to load. But as you can see we're still in business. :)

80mbps? How much of that is filtered?

(Jun 21, 2010 09:54 AM)Omniscient Wrote:  It's not a matter of filtering the IP's. The traffic will still hit the server at the firewall level. The slowdown we do have is simply the firewall reviewing each packet an figuring out who is legit. As you can see from screenshot the server is not overloaded at all. Load is at a very normal 1.6 right now.

The packets are empty anyways and aren't doing anything but hitting port 80. They appear to be incomplete fragments probably with malformed headers.

Ah, I see now. Good thing we got a DDoS expert 😉
Quote:80mbps? How much of that is filtered?

Let's put it this way...out of about a million packets only 15 are kept. That's how much the firewall is blocking.
Content deleted to prevent possible harm to our members. -Staff
(Jun 21, 2010 09:58 AM)Omniscient Wrote:  Let's put it this way...out of about a million packets only 15 are kept. That's how much the firewall is blocking.

Wow. Something is telling me you're using Online Armor firewall 😝
(Jun 21, 2010 09:54 AM)Omniscient Wrote:  It's not a matter of filtering the IP's. The traffic will still hit the server at the firewall level. The slowdown we do have is simply the firewall reviewing each packet an figuring out who is legit. As you can see from screenshot the server is not overloaded at all. Load is at a very normal 1.6 right now.

The packets are empty anyways and aren't doing anything but hitting port 80. They appear to be incomplete fragments probably with malformed headers.

I find it very interesting. You should make a tut. on how to do this in the website section. I think many people will appreciate this including myself.
Thanks for the info Omni.
I just made some new adjustments so that firewall is dropping the empty packets even faster. I can already see more people are online now. A few tweeks here and there and my firewall will be solid.

Thanks DDOS'ers for the experience. I needed to do some new testing of my rulesets anyways.
Probably some skids over at Stond.org.
What i dont understand is why people make tons of topics that are already posted in announcements..

and that no one reads the twitter about why HF was down.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by ОЯВІТJun 22, 2016 01:40 PM 9 167 Jun 22, 2016 01:40 PM
Last Post: ОЯВІТ
by OmniscientMay 10, 2016 01:45 PM 203 5,008 May 10, 2016 01:45 PM
Last Post: Omniscient
by sqsgkrlhdwgNov 19, 2015 07:12 AM 8 180 Nov 19, 2015 07:12 AM
Last Post: DuguWudi