Live data from Hacker News

“We have been experiencing a catastrophic DDoS attack”

status.linode.com

51–60 of 151 posts

Re: “We have been experiencing a catastrophic DDoS attack”

#51

Earlier quoted context omitted.

For our setup we just have master-master replication across two different hosting providers.

I've been wondering about this lately. Is it really feasible for a small (one man?) team to keep master-master MySQL replication over WAN running smoothly?

I'm a one man operation keeping a master-slave setup with a manual failover and it's been pretty smooth sailing once I got it setup. Don't know how much more complex master-master would be.

Re: “We have been experiencing a catastrophic DDoS attack”

#52
post #45

Does the US have a competent cyber-crime division that can handle stuff like this?

Yes, the FBI. They're fantastic at it and part of their job is helping businesses recover from compromise and going after the attackers. However, they're overworked government employees with not enough resources.

I think they very much want to, but what can you do if all of your IPs lead to tor exit nodes?

From what I've heard, the FBI will collect a whole bunch of information and then sit on their hands because of the above reason.

Re: “We have been experiencing a catastrophic DDoS attack”

#53
post #51

Earlier quoted context omitted.

I've been wondering about this lately. Is it really feasible for a small (one man?) team to keep master-master MySQL replication over WAN running smoothly?

I'm a one man operation keeping a master-slave setup with a manual failover and it's been pretty smooth sailing once I got it setup. Don't know how much more complex master-master would be.

It's pretty much the same. You almost never want writes on both sides (now in a failover plan anyway), so as long as you have a switch for which side receives the writes, it's simple.

Re: “We have been experiencing a catastrophic DDoS attack”

#54

Earlier quoted context omitted.

I'd be ok with paying twice what I'm currently paying if they could solve this problem. We're with Linode because it would cost us about 10x as much to run on AWS, and we can't justify that.

They're price-matching DigitalOcean, so raising prices is probably out of the question.

Linode is now half the price of DO per RAM

Re: “We have been experiencing a catastrophic DDoS attack”

#55
I disagree with people saying these types of attacks can't be prevented if you switched hosts. I'm sure Google+cloudflare[0] would keep your website online. AWS also if you had the cash.

The amount of distributed traffic happening right now against linode would probably only represent a 5% increase in traffic to a popular Google product. At least you know they have the expertise. Nothing against the very smart and talented linode engineers, but the two companies are on very different levels of traffic engineering.

[0] https://www.cloudflare.com/google/

Re: “We have been experiencing a catastrophic DDoS attack”

#57
post #34

Can anyone recommend a good article that explains how attacks like these work, and what is required to stop them? Also, we're on Heroku and they advertise Ddos mitigation as a feature, but "mitigation" sounds non-commital and I'm curious how they'd fare against a similar attack?

It's non-commital, because at some point, when you have enough zombie hosts properly distributed all over the world attacking you, your only defence is - have more bandwidth than the attackers. If your peers can't filter out the traffic before it hits your network and it simply saturates your pipes, there's nothing you can do inside the company anymore.

Re: “We have been experiencing a catastrophic DDoS attack”

#58

It's not hard to compare this to brush fires. They happen periodically, and only the big trees tend to survive them. Linode is getting pretty unlucky here, but I would imagine that all the small time (and even the medium sized) hosting provides are going to succumb eventually. Is the end game just going to be Google vs. Amazon?

I'd love to see a network infrastructure and transport protocol that's more resistant to many (D)DoS attacks, because it seems like things will only worsen if it never becomes more difficult for people to attack others' servers online.

Good luck. A DDoS is basically lots of traffic. Perhaps run IPX? (Joking)

Re: “We have been experiencing a catastrophic DDoS attack”

#59
post #45

Earlier quoted context omitted.

Yes, the FBI. They're fantastic at it and part of their job is helping businesses recover from compromise and going after the attackers. However, they're overworked government employees with not enough resources.

I think they very much want to, but what can you do if all of your IPs lead to tor exit nodes? From what I've heard, the FBI will collect a whole bunch of information and then sit on their hands because of the above reason.

How can tor nodes be used for that?

Tor exposes a SOCKS interface, you can't control TCP/IP with the level of detail needed to perform these attacks.

Re: “We have been experiencing a catastrophic DDoS attack”

#60
post #34

Can anyone recommend a good article that explains how attacks like these work, and what is required to stop them? Also, we're on Heroku and they advertise Ddos mitigation as a feature, but "mitigation" sounds non-commital and I'm curious how they'd fare against a similar attack?

The discussion [1] below was helpful to summarize the last DDoS attack and new controls implemented.

[1] https://news.ycombinator.com/item?id=10998661

Post reply on HN