stop the ddos somehow

General SS13 Chat
Post Reply
User avatar
Super Aggro Crag
In Game PermaBanned
Joined: Sat Mar 21, 2015 9:47 pm
Byond Username: Super Aggro Crag

stop the ddos somehow

Post by Super Aggro Crag » #489555

i wanna play
Image
Image
Image
Image
Image
Image
Image
User avatar
oranges
Code Maintainer
Joined: Tue Apr 15, 2014 9:16 pm
Byond Username: Optimumtact
Github Username: optimumtact
Location: #CHATSHITGETBANGED

Re: stop the ddos somehow

Post by oranges » #489556

User avatar
D&B
Joined: Mon Jun 13, 2016 2:23 am
Byond Username: Repukan
Location: *teleports behind you*

Re: stop the ddos somehow

Post by D&B » #489574

When you code it
Spoiler:
[20:26:02]ADMIN: PM: [censored admin]->[censored]: Welp. It was just a prank bro isn't a very good excuse when it comes to unprovoked nonantag murder, but since this is your first time doing it and you seem to understand the problem instead of a bannu I'm just going to leave you with a warning. Please PLEASE don't do this again in the future, as funny as crackhead broken bottle memes can be. Alrighty? Do you have any input on this?
[20:26:39]ADMIN: PM: [censored]->[censored admin]: Alright, no problem. I have some input. Fuck my boy pussy.
[20:27:06]ADMIN: PM: [censored admin]->[censored]: Okay then. Have fun.
[20:31:29]ADMIN: PM: [censored admin]->[censored]: Excuse me?
J_Madison wrote: that's a stupid fucking stat
you don't play, you've never played
lying little shit with your bullshit stat
fuck you
ColonicAcid wrote:and with enough practise i too could blow my own dick so well that only the gods know how it feels.
User avatar
Yakumo_Chen
Joined: Fri Dec 11, 2015 10:08 pm
Byond Username: Yakumo Chen

Re: stop the ddos somehow

Post by Yakumo_Chen » #489575

Pick the free one?
Image
Image
User avatar
oranges
Code Maintainer
Joined: Tue Apr 15, 2014 9:16 pm
Byond Username: Optimumtact
Github Username: optimumtact
Location: #CHATSHITGETBANGED

Re: stop the ddos somehow

Post by oranges » #489673

Yakumo_Chen wrote:Pick the free one?
the free tier we are using is being swamped by the DDOS
User avatar
terranaut
Joined: Fri Jul 18, 2014 11:43 pm
Byond Username: Terranaut

Re: stop the ddos somehow

Post by terranaut » #489675

oranges wrote:
Yakumo_Chen wrote:Pick the free one?
the free tier we are using is being swamped by the DDOS
just pick it 5 times and stack it lol
[🅲 1] [🆄 1] [🅼 1]

Image
User avatar
Cobby
Code Maintainer
Joined: Sat Apr 19, 2014 7:19 pm
Byond Username: ExcessiveUseOfCobby
Github Username: ExcessiveUseOfCobblestone

Re: stop the ddos somehow

Post by Cobby » #489691

D&B wrote:When you code it
Voted best trap in /tg/ 2014-current
Retardedgrayshit
Joined: Sat Dec 15, 2018 10:33 am
Byond Username: Darkness12344

Re: stop the ddos somehow

Post by Retardedgrayshit » #489722

hjkghjkghjkghjkghjk
Last edited by Retardedgrayshit on Mon Feb 07, 2022 8:39 pm, edited 1 time in total.
User avatar
oranges
Code Maintainer
Joined: Tue Apr 15, 2014 9:16 pm
Byond Username: Optimumtact
Github Username: optimumtact
Location: #CHATSHITGETBANGED

Re: stop the ddos somehow

Post by oranges » #489734

this, this is salt
User avatar
Super Aggro Crag
In Game PermaBanned
Joined: Sat Mar 21, 2015 9:47 pm
Byond Username: Super Aggro Crag

Re: stop the ddos somehow

Post by Super Aggro Crag » #489771

Retardedgrayshit wrote:Hey Dan Gar here just wanted to say i hope your shitty server gets ddosed until the end of time
More like dan gay
Image
Image
Image
Image
Image
Image
Image
User avatar
peoplearestrange
Joined: Tue Apr 22, 2014 12:02 pm
Byond Username: Peoplearestrange
Location: UK

Re: stop the ddos somehow

Post by peoplearestrange » #489920

Retardedgrayshit wrote:Hey Dan Gar here just wanted to say i hope your shitty server gets ddosed until the end of time
Is this more salt than the time someone printed out a pic of anon and literally shit on it? It's certainly on a par. Either way they both need you to handle your own poop to clean up.
Whatever
Spoiler:
oranges wrote:singulo.io is the center point of rational and calm debate, where much of tg's issues are worked out in a fun and family friendly environment
miggles wrote:it must have been quite the accomplishment, killing a dead butterfly
WeeYakk wrote:If you take a step back from everything watching the community argue janitor related changes is one of the most surreal and hilarious things about this game. Four pages of discussing the merits of there being too much or too little dirt in a video game.
Operative wrote:Vote PAS for headmin! Get cucked and feel good getting cucked.
TheNightingale wrote:I want to get off Mr. Scones's Wild Ride...
NikNakFlak wrote:Excuse you, I was doing intentional bug testing for the well being of the server. I do not make mistakes.
Fragnostic wrote:stop cucking the first shitshow ever that revolved around me.
This is my moment, what are you doing?!
Anonmare wrote:Oranges gestures at the thread, it shudders and begins to move!
Saegrimr wrote:
callanrockslol wrote:all you have to do is ban shitters until the playbase improves/ceases to exist, whichever comes first.
IM TRYING
Screemonster wrote:hellmoo is the mud for grown adults who main reaper in overwatch
Kor wrote:
confused rock wrote:...its like if we made fire extinguishers spawn in emergency boxes and have them heal you when you put out fires rather than them being in wall storages...
Are you having a stroke
bandit wrote:you are now manually GLORFing
MrStonedOne wrote:The best part about the election is when I announce my pick because I'm just as surprised as everybody else.
PM:[USER]->IrishWristWatch0: Yeah, im make it on but how im make the station to to sun and not go to sun

OOC: Francinum: Five Rounds at PAS's
"You are destinied to defeat Dr. Uguu and his 5 Robot Masters
(All-Access-Man, ShootyBlackCoat Man, ChloralHydrate Man, Singulo Man and TeleportArmor Man)"
I'm a box
User avatar
PKPenguin321
Site Admin
Joined: Tue Jul 01, 2014 7:02 pm
Byond Username: PKPenguin321
Github Username: PKPenguin321
Location: U S A, U S A, U S A

Re: stop the ddos somehow

Post by PKPenguin321 » #489932

peoplearestrange wrote:
Retardedgrayshit wrote:Hey Dan Gar here just wanted to say i hope your shitty server gets ddosed until the end of time
Is this more salt than the time someone printed out a pic of anon and literally shit on it? It's certainly on a par. Either way they both need you to handle your own poop to clean up.
It's bait
i play Lauser McMauligan. clown name is Cold-Ass Honkey
i have three other top secret characters as well.
tell the best admin how good he is
Spoiler:
Image
User avatar
MisterPerson
Board Moderator
Joined: Tue Apr 15, 2014 4:26 pm
Byond Username: MisterPerson

Re: stop the ddos somehow

Post by MisterPerson » #490073

Super Aggro Crag wrote:
Retardedgrayshit wrote:Hey Dan Gar here just wanted to say i hope your shitty server gets ddosed until the end of time
More like dan gay
Woah calm down there Crag, your cunning wit's gonna kill someone.
I code for the code project and moderate the code sections of the forums.

Feedback is dumb and it doesn't matter
carshalash
Joined: Sat Aug 26, 2017 4:57 am
Byond Username: Carshalash

Re: stop the ddos somehow

Post by carshalash » #490084

Retardedgrayshit wrote:Hey Dan Gar here just wanted to say i hope your shitty server gets ddosed until the end of time
Aren't you that guy that would hound admins every round for free antag?
User avatar
Plapatin
In-Game Game Master
Joined: Wed Sep 06, 2017 11:26 am
Byond Username: Plapatin
Location: Location: Location: Location: Location: Location: Location: Location: Location:

Re: stop the ddos somehow

Post by Plapatin » #490102

peoplearestrange wrote:
Retardedgrayshit wrote:snip
Is this more salt than the time someone printed out a pic of anon and literally shit on it? It's certainly on a par. Either way they both need you to handle your own poop to clean up.
holy shit its been a while i thought you died
wesoda25 wrote:i had a dream that me and some friends were like in this tribal village and we were all doing cocaine around this massive bonfire and I kept seeing all these foreshadowing elements that we were gonna die but i just did more cocaine
OrdoM wrote:Argent, a swan argent over a saltire vert - the vert representing the vomit cast upon the floor by the vomitgoose
User avatar
Electronics
Github User
Joined: Fri Sep 19, 2014 4:49 pm
Byond Username: Electronics111
Github Username: Electronics

Re: stop the ddos somehow

Post by Electronics » #490143

Can we not get whatever ISP we have to block the sources of the ddos?
User avatar
Qbmax32
Joined: Sun Feb 19, 2017 4:05 am
Byond Username: Qbmax32
Github Username: qbmax32
Location: in your walls

Re: stop the ddos somehow

Post by Qbmax32 » #490144

We believe it’s a bot net
my admin feedback thread


quotes
Spoiler:
wesoda25 wrote: Wed Mar 03, 2021 5:02 am Qbmax32 is quite literally one of the dumbest individuals I have ever had the misfortune of coming into contact with. He has zero redeemable traits, and honestly I have to suppress my gag reflex every time he shows up in a conversation.
Malkraz wrote:YES
DRINK THE PISS QB
angelstarri wrote:qbmax is a retard
imsxz wrote:mythic please stop you’ve hit rock bottom and you KEEP DIGGING
deedubya wrote:I'll defend to the death your right to scream "NIGGER NIGGER NIGGER" on a constant basis, but I'll also equally defend the right of people to call you a fuckin' pillock for doing it.
datorangebottle wrote:what, not having to act like customer service in a volunteer customer service position?

Here's a rebuttal: you're literally in a customer service slash celebrity position. Volunteer or not.
Malkraz wrote:can you stop posting this shit
Nalzul wrote:Fuck Blob (can you imagine how hot it would be to be gangbanged by a bunch of blobbernauts, the blob, and spores)
Wyzack wrote:qbmax your pathetic display of abhorrent burgercraft has brought shame onto the omnivores
Plapatin wrote:i AM the senate
BONERMASTER wrote:I am a big thinker, and it would only be logical if my character had a big head as well. And glasses. Because only people that think, wear glasses.
feem wrote:i tried to send canisters of urine to the station but ended up turning all oxygen into urine and breaking lavaland and also breathing
Anonmare wrote:Each post in this thread can't settle on what it wants to be, but yet, each one is more cursed than the last.
Beesting12 wrote:please write an apology to this forums, this community, the host, and the internet as a whole for the data storage space you wasted with this complaint.
Vile Beggar wrote:i don't like this thread
imsxz wrote:nervore
FantasticFwoosh wrote:I will whisper sweet nothings that will confuse and perhaps scare you a little, but enhance the experience no-less.
afelinidisfinetoo wrote:By the way, the person who posted that catgirl porn on the github page was me. If anyone wants my private stash just PM me
Nervere wrote:Anything for a femoid.....
Qbopper wrote:I'm a dumb poopy butthead
CitrusGender wrote:god i love it when people feed me my own fried legs
User avatar
Super Aggro Crag
In Game PermaBanned
Joined: Sat Mar 21, 2015 9:47 pm
Byond Username: Super Aggro Crag

Re: stop the ddos somehow

Post by Super Aggro Crag » #490146

get the ion rifle then dip STICK
Image
Image
Image
Image
Image
Image
Image
User avatar
Super Aggro Crag
In Game PermaBanned
Joined: Sat Mar 21, 2015 9:47 pm
Byond Username: Super Aggro Crag

Re: stop the ddos somehow

Post by Super Aggro Crag » #490244

LaKiller8 wrote:Just flip off the "Allow DDoS" switch smh MSO is so lazy
Well it is weedsmas
Image
Image
Image
Image
Image
Image
Image
User avatar
MrStonedOne
Host
Joined: Mon Apr 14, 2014 10:56 pm
Byond Username: MrStonedOne
Github Username: MrStonedOne

Re: stop the ddos somehow

Post by MrStonedOne » #490431

The source address of an Internet Protocol packet is spoofable. The only protection against this is the fact that establishing a connection requires a 3 way handshake and if you spoof the source address you don't get the 2nd packet so you can't properly respond with the final 3rd packet.

What we are getting is a massive flood of spoofed packets to the tune of 1 to 5 million packets a second, depending on what they can afford at that time.

The source address of these packets is spoofed, during a 10,000 packet sample taken during one of the ddos's, there were 9946 unique source ip addresses.
Forum/Wiki Administrator, Server host, Database King, Master Coder
MrStonedOne on digg(banned), Steam, IRC, Skype Discord. (!vAKvpFcksg)
Image
User avatar
D&B
Joined: Mon Jun 13, 2016 2:23 am
Byond Username: Repukan
Location: *teleports behind you*

Re: stop the ddos somehow

Post by D&B » #490457

Dumb pindosi
Spoiler:
[20:26:02]ADMIN: PM: [censored admin]->[censored]: Welp. It was just a prank bro isn't a very good excuse when it comes to unprovoked nonantag murder, but since this is your first time doing it and you seem to understand the problem instead of a bannu I'm just going to leave you with a warning. Please PLEASE don't do this again in the future, as funny as crackhead broken bottle memes can be. Alrighty? Do you have any input on this?
[20:26:39]ADMIN: PM: [censored]->[censored admin]: Alright, no problem. I have some input. Fuck my boy pussy.
[20:27:06]ADMIN: PM: [censored admin]->[censored]: Okay then. Have fun.
[20:31:29]ADMIN: PM: [censored admin]->[censored]: Excuse me?
J_Madison wrote: that's a stupid fucking stat
you don't play, you've never played
lying little shit with your bullshit stat
fuck you
ColonicAcid wrote:and with enough practise i too could blow my own dick so well that only the gods know how it feels.
User avatar
peoplearestrange
Joined: Tue Apr 22, 2014 12:02 pm
Byond Username: Peoplearestrange
Location: UK

Re: stop the ddos somehow

Post by peoplearestrange » #490500

MrStonedOne wrote:The source address of an Internet Protocol packet is spoofable. The only protection against this is the fact that establishing a connection requires a 3 way handshake and if you spoof the source address you don't get the 2nd packet so you can't properly respond with the final 3rd packet.

What we are getting is a massive flood of spoofed packets to the tune of 1 to 5 million packets a second, depending on what they can afford at that time.

The source address of these packets is spoofed, during a 10,000 packet sample taken during one of the ddos's, there were 9946 unique source ip addresses.
Its kinda amazing (read:sad) that someone is spending their (or their parents) hard earned cash to make a game server suffer for awhile. Because thats all it is, an annoying inconvience. Eventually they will get bored, run out of money, or we'll find away to stop it.

They think they are self rightous, we think they'll be forgotten.
Plapatin wrote:holy shit its been a while i thought you died
Na im still alive, just been doing other stuff non SS13, though like us all, we come back eventually.
Whatever
Spoiler:
oranges wrote:singulo.io is the center point of rational and calm debate, where much of tg's issues are worked out in a fun and family friendly environment
miggles wrote:it must have been quite the accomplishment, killing a dead butterfly
WeeYakk wrote:If you take a step back from everything watching the community argue janitor related changes is one of the most surreal and hilarious things about this game. Four pages of discussing the merits of there being too much or too little dirt in a video game.
Operative wrote:Vote PAS for headmin! Get cucked and feel good getting cucked.
TheNightingale wrote:I want to get off Mr. Scones's Wild Ride...
NikNakFlak wrote:Excuse you, I was doing intentional bug testing for the well being of the server. I do not make mistakes.
Fragnostic wrote:stop cucking the first shitshow ever that revolved around me.
This is my moment, what are you doing?!
Anonmare wrote:Oranges gestures at the thread, it shudders and begins to move!
Saegrimr wrote:
callanrockslol wrote:all you have to do is ban shitters until the playbase improves/ceases to exist, whichever comes first.
IM TRYING
Screemonster wrote:hellmoo is the mud for grown adults who main reaper in overwatch
Kor wrote:
confused rock wrote:...its like if we made fire extinguishers spawn in emergency boxes and have them heal you when you put out fires rather than them being in wall storages...
Are you having a stroke
bandit wrote:you are now manually GLORFing
MrStonedOne wrote:The best part about the election is when I announce my pick because I'm just as surprised as everybody else.
PM:[USER]->IrishWristWatch0: Yeah, im make it on but how im make the station to to sun and not go to sun

OOC: Francinum: Five Rounds at PAS's
"You are destinied to defeat Dr. Uguu and his 5 Robot Masters
(All-Access-Man, ShootyBlackCoat Man, ChloralHydrate Man, Singulo Man and TeleportArmor Man)"
I'm a box
FuttBucker
Joined: Fri Apr 19, 2019 2:10 pm
Byond Username: RearAdmiralFuttBucker

Re: stop the ddos somehow

Post by FuttBucker » #490512

peoplearestrange wrote:
MrStonedOne wrote:The source address of an Internet Protocol packet is spoofable. The only protection against this is the fact that establishing a connection requires a 3 way handshake and if you spoof the source address you don't get the 2nd packet so you can't properly respond with the final 3rd packet.

What we are getting is a massive flood of spoofed packets to the tune of 1 to 5 million packets a second, depending on what they can afford at that time.

The source address of these packets is spoofed, during a 10,000 packet sample taken during one of the ddos's, there were 9946 unique source ip addresses.
Its kinda amazing (read:sad) that someone is spending their (or their parents) hard earned cash to make a game server suffer for awhile. Because thats all it is, an annoying inconvience. Eventually they will get bored, run out of money, or we'll find away to stop it.

They think they are self rightous, we think they'll be forgotten.
Plapatin wrote:holy shit its been a while i thought you died
Na im still alive, just been doing other stuff non SS13, though like us all, we come back eventually.
https://en.wikipedia.org/wiki/Hanlon%27s_razor
"Never attribute to malice that which can be easily explained by human stupidity."

They're not DDoS-ing the hosts in some effort to cause a massive problem for hundreds of people or to somehow gain an upper hand.
They're doing it because "it's funny."
It's like choosing to play an assistant because you want to play Antag, but when you don't get antag you decide to "do dumb fun things" as an assistant which ends up pissing off half the station.

on a related topic, Reverse proxies are an absolutely wonderful way to help mitigate DDoS attacks; has any consideration been given to standing up an nginx reverse proxy for the purposes of DDoS mitigation? or would the BYOND engine have an aneurysm over the concept?
User avatar
MrStonedOne
Host
Joined: Mon Apr 14, 2014 10:56 pm
Byond Username: MrStonedOne
Github Username: MrStonedOne

Re: stop the ddos somehow

Post by MrStonedOne » #490679

A network of reverse tcp proxies was an idea we discussed to stop the attacks, we can even do validation by just putting a stub byond world that whitelists the ip and redirects to the whitelisted port. The hard part is cost of the other nodes. You can kinda abuse vpses and the fact they all come with some amount of bandwidth at a cheaper cost than buying it directly, subsidised by the fact that most of the clients don't use much of their allotment, but mis-plan the capacity and you're looking at some costly invoices.

Let's say you get 13 amazon lightsail instances at $3.5 a month each $45.5 total, one for each aws region, thats 13tb a month of included bandwidth usage.

This month so far, /tg/ has used 37037.29 GB of bandwidth, most of that from the ddos, and it's only the 23rd.

At 0.09 USD/GB for bandwidth overages, that would be $2,135.28 in overages.

Upgrade the nodes, get the 2TB for $5 a month, and now you have 26TB of capacity for $65 total a month. Thats still not 37TB of capacity.

$937.20 overage fee

It doesn't make sense to scale the nodes up at this point, 10 bucks only gets you 3TB, its cheaper scale them out. 7 more $5 nodes in the 7 popular regions for a total of $100 a month for 40TB of capacity,

This is also the max amount of lightsail nodes you can have in one aws account, before they force you to use ec2 instances that have no included bandwidth. There are other providers with about the same pricing, just not one with nodes in all the same regions as aws, and doesn't tie in as nicely to route 53's latency based domain records to do the actual geoip routing.

Still, thats $100/month to (hopefully) cover the ddos, and given current usage, and the fact the ddos hasn't been happening all month, it would very likely still break past 40TB in one month.

Thats not to say building this system wouldn't have other benefits. Overall ping would drop because the routes would be better than home isp routes.

Even now, pinging my personal ip from the server, and pinging the server from my computer, show two different routes, and a ping drop from 60ms to 45ms, and i'm only two states away from the server. Data Centers generally optimize for better routes. Home isps instead keep the traffic in network for longer, bouncing from connected region to connected region, optimizing for the cheaper route when it finally leaves their network.

Hit 420 on the patreon (or hell, hit 365) and I'll be able to do it. It's not like I can't turn off the nodes if it looks like its about to go over.
Forum/Wiki Administrator, Server host, Database King, Master Coder
MrStonedOne on digg(banned), Steam, IRC, Skype Discord. (!vAKvpFcksg)
Image
Post Reply

Who is online

Users browsing this forum: No registered users