More DDoS Information

[Kestrel]

This was posted in another thread, but thought it could use its own post to make this more visible.

Just to clear up some confusion I am seeing, the DDoS is hitting an L4 bottleneck. This is not something that we have direct control over or any access to implement things like whitelists or custom scrubbing. These attacks are not related to how our server runs, and there are no exploits that make a DDoS more effective they are simply flooding our L4 bottleneck until it collapses.

Because we have unique traffic patterns (game traffic is different than most web traffic, especially our game traffic) and are unable to compromise on our anonymity, our options for 3rd party solutions are extremely limited. We still have no timeline from FlokiNet on the delivery date of our new server hardware, but the order was placed on August 16th (before the DDoS attacks began) so we expect it to be online SOONtm. We have requested a more specific timeline from them but have not heard back and understand they themselves are dependent on external vendors who may not be providing timelines.

There are absolutely some sacrifices and trade offs involved with hosting a project anonymously, and we are feeling the pain of those right now. We hope that you all see the value in these trade offs like we do. We have faith that these trade offs will allow our project to thrive for years to come once these DDoSes are resolved.

[Defiant]

Thanks for the update

[Mjolhnerforum]

Thank you. keep up the good work.

[Cadzilla]

Right on...thanks for the info/update. Keep up the good fight!

[Peanutwarrior]

Keep it up, I have 0 intention of going anywhere and have other stuff to do in the mean time.

[Firetips]

thank u for the info. yes the ddos makes it where i cant play but i keep checking and playing when i can. their attacks wont make me stop playing or even go to other servers. we all know that its the other private servers hitting u guys. they just angry cause ur version is better. if they cant let their product do all the talking and have to resort to attacks like this, that tells me everything i need to know about who they are. keep up the fight boys and girls. cant wait to lvl more and check out the other stuff u guys got going on.

[Darknessnz]

It's incredibly selfish. Should you ever discover the source of these attacks, be a dear and let us know.

Long term, the internet is undefeated.

[Faelia]

You are doing a great job working within the parameters you have. Your server is worth the effort and even if you suffer short term player loss, I am certain you will earn long term gains. Just keep working on it. Thank you for your efforts on our behalf.

[Gibom]

This was posted in another thread, but thought it could use its own post to make this more visible.

Just to clear up some confusion I am seeing, the DDoS is hitting an L4 bottleneck. This is not something that we have direct control over or any access to implement things like whitelists or custom scrubbing. These attacks are not related to how our server runs, and there are no exploits that make a DDoS more effective they are simply flooding our L4 bottleneck until it collapses.

Because we have unique traffic patterns (game traffic is different than most web traffic, especially our game traffic) and are unable to compromise on our anonymity, our options for 3rd party solutions are extremely limited. We still have no timeline from FlokiNet on the delivery date of our new server hardware, but the order was placed on August 16th (before the DDoS attacks began) so we expect it to be online SOONtm. We have requested a more specific timeline from them but have not heard back and understand they themselves are dependent on external vendors who may not be providing timelines.

There are absolutely some sacrifices and trade offs involved with hosting a project anonymously, and we are feeling the pain of those right now. We hope that you all see the value in these trade offs like we do. We have faith that these trade offs will allow our project to thrive for years to come once these DDoSes are resolved.

Senior Software Engineer here,

why the same server handles both the website and the game itself?
at the very least i would expect a facade service to soak the incoming heavy DDOS traffic, this one is a pretty small and lean service that can be scaled pretty cheaply if needed without hurting your main game service.

is the server a monorepo?

[Kestrel]

Senior Software Engineer here,

why the same server handles both the website and the game itself?
at the very least i would expect a facade service to soak the incoming heavy DDOS traffic, this one is a pretty small and lean service that can be scaled pretty cheaply if needed without hurting your main game service.

is the server a monorepo?

We broke out from the monorepo structure we inherited from the 1.17.1/2 leak before we did any meaningful work on the project. Our initial expectations were a 100-500 peak server within a few months to a year and so planned to host everything on a relatively small single box. As we have grown we changed this plan to split out services into different boxes but were waiting on this next migration to do so as there is no point in doing it all twice.

Using those lean and easy to scale services for our website is more of a "mainstream" option, and is a bit more difficult when the "mainstream" providers require a government ID. We do have separate proxies for our website that help keep it a bit more stable but until things are truly isolated there is not much we can do. We can't exactly make an AWS account