2018/05/10 - Connectivity Issues - DDoS Attack

Not really - pointing fingers without any proof nor clue makes things worse usually.

Can I haz yous materials. Educate yourself distributed denial of service (DDoS) attack

Why dont you try petitioning the loss once TQ is back, as people do every time something like this happens


Hey, if you want i would gladly hold on to all of your assets and isk to keep them safe until the server is stable.

I don’t pretend to have knowledge of CCPs EVE server infrastructure but, similar to any other hosted system, you have a point of ingress into your network, through network infrastructure, including firewalls. This will usually allow access to a “DMZ” network, which houses your internet-facing servers. These are likely to be the authentication servers for EVE in this case. The firewalls that connect your DMZ to the internet will be open to all ports that are required for communication with the servers in that zone.
Connecting your DMZ to the internal network and application and database servers will be another set of network infrastructure including further firewalls, which are configured to allow communication between your servers in the DMZ and your internal servers.
When a DDOS occurs, the attacker is simply flooding the network infrastructure at the point of ingress to the network / DMZ with traffic, which cannot cope with the level and, in effect, “denies service” to legitimate connectivity requests.
There are things that can be done to mitigate against a DDoS, but very few are even close to 100% effective and all cost a lot of ISK, err $$$

The point is that, even if you have segregated your application and database servers from the internet, if your point of network ingress is overloaded, that simply isn’t going to help you.

Edited to add: Read the link that Radkiel posted above, or use Google to find other resources that describe DDoS

2 Likes

Info on the EVE server


If that is considered duct tape
 That is some truly high quality duct tape.

1 Like

The local chat is still delayed, I’m seeing my corp-mates on local, but they’re not in corp chat xD

so the TLDR; version is: lots of shards, a big beefy database, and load-balanced multihosting.

Or: just a little more complicated than my home cluster, which is:

DB server (1x)
|
Process cluster (1-40x depending on what I need to do)
|
Client terminals (2-5x depending on who’s home and logged in)
|
|
[INTERNET]

KEY: | = router (all on different subnets with different credentials so basically you’ve got to go through four firewalls to get at the database)

Nah you missed them further up the thread


Oh nevermind then.

1 Like

Not really because it generates content.

They can’t if they give out reward’s that might incite people to do this more often for free SP.

2 Likes

So basically you could partition your home system through proxies to launch a DDoS attack?

No, because there is still one point of exit that will limit the volume of data you can send. He only has one IP to get the data to his internet provider and to internet. I think one good computer is enough to flood your connexion, two if your network cards are bad and your connexion very good. And then your internet provider will detect an attack is originating from your network and it will shut you down.

1 Like

Nah man, if CCP actually did something smart and useful with my money (like hiring a dev with any sort of network admin background), I will sign a contract which specifically states I will not complain about a minor hiccup within reason. Is that what you want, my man?

lol - that’s perfect example of Severe Overreaction Disorder (SOD) that sadly seems to afflict us gamer nerds often. *saved for future use

Dear fellow nerds: If you lost your pixel-things as a result of this / these attacks, file a support ticket and wait patiently and politely. CCP will eventually restore your loss. In the meantime simply go on playing the game (since you certainly weren’t flying what you couldn’t afford to lose - mentally and/or financially
right?)

1 Like

There is a great disturbance in the Force.

1 Like

Maybe you should educate yourself before opening your mouth and showing your cluelessness.
Ships or assets lost due to an issue such as this will generally be reimbursed.

The kind of attacks the cluster is under is near impossible to avoid or defend against. In the end
 seriously. it’s only space pixels
 If you get all worked up about losing a ship I’d wager you are flying above your affordability level.

And yet you imply that it is the fault of CCP? They’re the ones being attacked by the DDoS.

DDOS mitigation in this case would be challenging.

I’m assuming you know how it works, but I’ll explain it so that everyone else does too.

DDOS mitigation works by funneling all the client requests through a “thing” (provider, on premise appliance, whatever). The “thing” first does basic vetting to make sure that the request isn’t part of the DDOS attack, and then relays it through to the intended server. In the case of something like web traffic, they’ll commonly pair it with caching so as to further reduce load on the attacked server/service.

In this case it’s hard to do because it’s a proprietary client likely with proprietary communications. They aren’t running a known service like HTTP/S.

The protective servers would need to be prepared in such a way as to perform in an identical fashion to CCP’s own servers.

Then you have to consider the added latency that everyone experiences from the extra hops. Now you aren’t just talking to CCP, you’re talking to the provider and then to CCP. Substantial increase in latency, likely going to break more than a few people.

3 Likes

Simplified

image

highway = bandwith, cars = packets, too many cars = traffic jam, DDoS = actors sending too many cars for the highway to handle, Result: traffic jam.

Solution = bigger bandwith or slowing the traffic down and sending unwanted cars/traffic into the void

Actors will just send more traffic

Current DDoS can reach multiple Tb/s ( wikipedia ). At this point it might even be a switch BEFORE ( on the route to ) TQ that goes down for the count.
Or 
 TQ ( being on the same pipe ) is not even the intended target.

I am complaining as much as you are about my game experience being ruined, but not directing it towards CCP.

Of note: http://www.bbc.com/news/technology-44038178

5 Likes