Yep, this started on Friday (Christmas day). I assume Linode itself is the target of the attacks, since they have spanned multiple regions.
Linode is suffering on-going DDoS attacks
131–140 of 186 posts
Re: Linode is suffering on-going DDoS attacks
#132Earlier quoted context omitted.
The best thing for reliability is to use multiple companies. AWS has proved that multiple times.
Disagree. It is hard to maintain codebase and consistent infrastructure setup for multiple providers. Amazon's m3.medium != some vendor's m3.medium. Network setup and configuration are also nightmare. Speaking from experience dealing with four cloud vendors at once. It sounds great from a textbook perspective, but unless you are ready to spend millions every year to fight fire, please don't do that. If you were to us…
It takes a bit of work and determination, but it comes together in the end.
One problem with building on AWS is their lack of network diversity. If there is a network cut, causing congested links, they will do little to try and alleviate congestion to save on cost. Issues in Oregon have caused network degradation between WEST-1 and WEST-2 that last for days with no improvement.
Re: Linode is suffering on-going DDoS attacks
#133Earlier quoted context omitted.
I use it for basic stuff, mainly for testing node apps, no high throughput. It's got a nice, simple management console. I don't like the fact that apt-get operations to set up your VM can blow your monthly quota pretty fast if you're not careful, but other than that, it's been fine. Periodically, they double everyone's bandwidth and storage for free; it's something to look forward to in another year or two... I hope.…
> I don't like the fact that apt-get operations to set up your VM can blow your monthly quota pretty fast if you're not careful What are you talking about? From https://www.linode.com/pricing : "Please note that all inbound traffic is free and will not count against your quota."
Re: Linode is suffering on-going DDoS attacks
#134Earlier quoted context omitted.
As of a few years ago Linode got transit from the facilities they are in and almost all of them had RTBH set up with a capacity of 5 or 10 routes. It would be incredibly foolish to operate a hosting provider without it.
Wait, you're saying that Linode uses facility transit? Like, they buy bandwidth from Savvis and TelX? Well that would be the problem right there. From what I can tell, Linode doesn't even have their own AS for customer traffic? It appears that they have an AS for some internal use, but not for customers?
When I left they also didn't really have the staff to run a proper NOC for a full-on AS; one extremely talented network engineer who has since left mostly owned all the "running a grown-up network" stuff, like running down an ASN, working RTBH with the facilities, well-designed uplink strategy at Linode's edge, and lobbying for anycast infrastructure for DNS and so on. They had just hired another purebred networking wonk as I moved on who probably owns it now, and likely has help. So punting a lot of the typical NOC work upstream to a facility with whom you're already working anyway made a bit of resource-related sense at the time, since staffing a NOC for a network of that scale is a significant challenge and they like to operate lean.
That's changing now (I didn't know this and learned it from agwa's comment), which is probably reflective of growth on the resource front.
Re: Linode is suffering on-going DDoS attacks
#135Earlier quoted context omitted.
> I don't like the fact that apt-get operations to set up your VM can blow your monthly quota pretty fast if you're not careful What are you talking about? From https://www.linode.com/pricing : "Please note that all inbound traffic is free and will not count against your quota."
Any the distros are configured to use local Linode mirrors for apt-get anyway.
Re: Linode is suffering on-going DDoS attacks
#136Just 2 days ago, a Linode employee was badmouthing AWS here on HN for being too expensive: https://news.ycombinator.com/item?id=10796094 A DDoS will be much more expensive to customers than choosing AWS over Linode (or an equivalent low-priced service). EC2 has been around since 2006, and never has had any issues resembling this.
So you're comparing DDoS of a provider with everyday spending? I was contracted a few months ago to save a website crumbling under its bills. They had $11k / month in AWS bills. Brought it down to $600 / month by switching them to Linode with a more reasonable stack. Not everything is a nail. Sometimes the mistake is choosing AWS.
Re: Linode is suffering on-going DDoS attacks
#137Yep, this started on Friday (Christmas day). I assume Linode itself is the target of the attacks, since they have spanned multiple regions.
Performing such large attacks for 5 days in a row costs thousands dollars to the attackers. It is not something a kid can do from their bedroom. Only a big company can have the budget to pay thousands to perform a 5-day multi Gbps attack against another company. Here it is clear that there is a competitor attacking Linode. A competitor who wants to extort them.
Instead of paying thousands $$$$$ to design and perform these attacks they could have just paid this money to buy better infrastructure and provide better services.
Re: Linode is suffering on-going DDoS attacks
#138Earlier quoted context omitted.
So you're comparing DDoS of a provider with everyday spending? I was contracted a few months ago to save a website crumbling under its bills. They had $11k / month in AWS bills. Brought it down to $600 / month by switching them to Linode with a more reasonable stack. Not everything is a nail. Sometimes the mistake is choosing AWS.
Amusingly, we moved our infrastructure from Linode to AWS and cut our bill roughly in half about a year ago.
However a lot of people jump on AWS when they really should not.
Re: Linode is suffering on-going DDoS attacks
#139Earlier quoted context omitted.
I've received the same type of email multiple times from DigitalOcean and its extremely frustrating. With even the smallest of traffic spikes, DigitalOcean will detect it as a DDoS and immediately cut off your server for 3 hours. If even a typical ( I've used multiple VPS providers and dedicated-server providers and DO is absolutely the worst when it comes to DDoS policy.
That's why DigitalOcean isn't ready for production (unless hiding ip address behind, lets say, cloudflare is an option in your case) and that's why I decided not to use their services anymore.
Re: Linode is suffering on-going DDoS attacks
#140Earlier quoted context omitted.
What DDoS protection does AWS provide? The only thing mentions on their webpage is autoscaling, more nodes, etc. In other words, AWS' DDoS protection strategy is to open up your wallet. About 6 months ago they did hire Jeff from BlackLotus. Given that timeline, I'd expect them to announce some sort of DDoS protection offering in the next few quarters. Edit to be more specific: AWS gets hit with a lot of DDoS attacks.…
Actually "Amazon CloudFront also has filtering capabilities to ensure that only valid TCP connections and HTTP requests are made while dropping invalid requests. This takes the burden of handling invalid traffic (commonly used in UDP floods, SYN floods, and slow reads) off your origin." and "By using multiple PoPs, Amazon CloudFront has the inherent ability to help mitigate against both infrastructure and some applic…
If you're comparing Amazon's offering to Linode, you should really compare to the protection Amazon offers on EC2 and similar VPS-like products.