Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Linode is suffering on-going DDoS attacks

status.linode.com

Post reply on HN
Print view View original

111–120 of 186 posts

Re: Linode is suffering on-going DDoS attacks

#111

Post by USNetizen »

I find this ironic because about 2 years ago I had a couple VMs with them that suffered CHRONIC DDoS attacks, all the time. I had to move my clients to a whole other platform. Linode, on the other hand, simply blamed us for supposedly causing the repeat DDoS attacks - one after another for months on end. They even got rather flippant with me exclaiming how "dumb" I was to not understand that is was MY problem apparently, not theirs, even though the target of the DDoS was several addresses in their IP block and not tied to a single client domain, server or anything else. They continued to blame us personally, and even tried to get us to foot the $3,000+ traffic bill.

Well, the tables have turned. Looks like it IS a Linode problem after all. And not a one-time issue, either. This has been happening to them for YEARS.

Re: Linode is suffering on-going DDoS attacks

#112

Post by deno »

otterley wrote: post #104
deno wrote: post #54

Earlier quoted context omitted.

On AWS the DDoS hits the wallet instead. What’s the difference? It’s “denial of service,” not denial of server and network resources.

AWS ELBs don't forward DNS and NTP traffic to the backends, and ingress bandwidth isn't billed to you. So there's no impact on the wallet when the most common DDoS traffic is aimed at you.

That’s a great point. Still leaves you open for a lot of abuse though.

Re: Linode is suffering on-going DDoS attacks

#113

Post by blisterpeanuts »

latenightcoding wrote: post #108

Strangely this whole thread convinced me to try Linode. Why? everyone keeps saying it's so cheap and I do A LOT of web crawling so I don't need 99.999% uptime

I use it for basic stuff, mainly for testing node apps, no high throughput. It's got a nice, simple management console. I don't like the fact that apt-get operations to set up your VM can blow your monthly quota pretty fast if you're not careful, but other than that, it's been fine. Periodically, they double everyone's bandwidth and storage for free; it's something to look forward to in another year or two... I hope.... if these DDOS idiots don't ruin it for everyone.

Re: Linode is suffering on-going DDoS attacks

#114

Post by jedicoffee »

mwcampbell wrote: post #49
thrownaway2424 wrote: post #37

I would like to correlate the comments in this thread with past comments on every single article about AWS or GCE of the form "this is so expensive / complicated I run my boxes on Linode for half the price". DDoS protection is one of the things you pay for on the big clouds.

What about DigitalOcean? Its pricing is comparable to Linode's, yet DigitalOcean is now the second largest web host in the world according to Netcraft. Do you still think that AWS, Google Cloud Platform, and Microsoft Azure offer better protection?

Yea, throw money at Netcraft and you can be batman of the internet. The numbers being provided to the public are not accurate in any way.

Re: Linode is suffering on-going DDoS attacks

#115

Post by otterley »

deno wrote: post #112
otterley wrote: post #104

Earlier quoted context omitted.

AWS ELBs don't forward DNS and NTP traffic to the backends, and ingress bandwidth isn't billed to you. So there's no impact on the wallet when the most common DDoS traffic is aimed at you.

That’s a great point. Still leaves you open for a lot of abuse though.

What would be an effective alternative?

Re: Linode is suffering on-going DDoS attacks

#117

Post by snowwrestler »

mikegioia wrote: post #38

This may be a dumb question as I haven't read the bill, but isn't this what CISA is supposed to help guard against in the future? If Linode has an easier way of sharing info with the USG, can that help pinpoint and mitigate this attack from happening in the future? Edit: how about a response instead of downvotes?

CISA is really intended to address sophisticated attacks that depend on vulnerabilities or vectors, and therefore have distinct signatures. These signatures are what companies will share with the government and each other.

A DDOS is usually just a dumb flood of traffic. There's no signature to share, and blocking IP addresses is usually pointless since big DDOS's come from large networks of hijacked personal computers.

Re: Linode is suffering on-going DDoS attacks

#118

Post by mwcampbell »

mark-ruwt wrote: post #110
yeukhon wrote: post #16

Earlier quoted context omitted.

Disagree. It is hard to maintain codebase and consistent infrastructure setup for multiple providers. Amazon's m3.medium != some vendor's m3.medium. Network setup and configuration are also nightmare. Speaking from experience dealing with four cloud vendors at once. It sounds great from a textbook perspective, but unless you are ready to spend millions every year to fight fire, please don't do that. If you were to us…

I think you're looking through the wrong end of the telescope, here. We currently have ~50 servers in 8 cities, across Linode, Digital Ocean, and Vultr. It took me two weeks to craft a ~400 line script that abstracted the server creation APIs for each. Once spun up, they're each bootstrapped with a script that builds each server from scratch identically regardless of the provider (with a couple one-offs for Vultr), b…

Have you considered selling that system in some form? Presumably it has to be tailored to the specific software stack, particularly the database(s) and other persistent storage. But maybe you could write an ebook on how to set up that kind of system, with examples from your scripts, and sell that.

Re: Linode is suffering on-going DDoS attacks

#119

Post by [deleted] »

blisterpeanuts wrote: post #113
latenightcoding wrote: post #108

Strangely this whole thread convinced me to try Linode. Why? everyone keeps saying it's so cheap and I do A LOT of web crawling so I don't need 99.999% uptime

I use it for basic stuff, mainly for testing node apps, no high throughput. It's got a nice, simple management console. I don't like the fact that apt-get operations to set up your VM can blow your monthly quota pretty fast if you're not careful, but other than that, it's been fine. Periodically, they double everyone's bandwidth and storage for free; it's something to look forward to in another year or two... I hope.…

[deleted]

Re: Linode is suffering on-going DDoS attacks

#120

Post by deno »

otterley wrote: post #115
deno wrote: post #112

Earlier quoted context omitted.

That’s a great point. Still leaves you open for a lot of abuse though.

What would be an effective alternative?

I’m a fan of OVH myself[1]. Heard good things about x4b.net as well.

[1] https://news.ycombinator.com/item?id=10807392

Post reply on HN