DoS attacks against my online game

#1

Post by def- » Mon, Sep 27, 2021, 7:39 PM UTC

DoS attacks against my online game
hookrace.net

Re: DoS attacks against my online game

#2

Post by Scaevolus » Mon, Sep 27, 2021, 9:01 PM UTC

DoSing small games like this sucks.

Have you looked at ddos-guard's pricing? They seem to be a common budget option.

Re: DoS attacks against my online game

#3

Post by def- » Mon, Sep 27, 2021, 9:09 PM UTC

Scaevolus wrote: post #2

DoSing small games like this sucks. Have you looked at ddos-guard's pricing? They seem to be a common budget option.

Thanks for the tip, I didn't know about them. From an initial look $240 for a 1 core vps is a bit too expensive for us.

Re: DoS attacks against my online game

#4

Post by debian3 » Mon, Sep 27, 2021, 9:12 PM UTC

You should look into OVH. They have those gaming server and they handle the DDOS protection. I was getting hit by DDOS before, but since I moved there, nothing (except an email from OVH to let me know that my server is being attacked and that they are filtering my trafic). On the server itself you just don't feel anything.

Edit: I should add that the DDOS protection is included with the server rental and there is no limit on the size or duration of the attack.

Re: DoS attacks against my online game

#5

Post by plasma » Mon, Sep 27, 2021, 9:12 PM UTC

A few suggestions:

1. Cloudflare offer TCP based DDoS protection too, see their Magic Transit or Spectrum product

2. This sucks, but put your servers behind WireGuard or Tailscale VPN so that in order to connect you need to have authenticated

Re: DoS attacks against my online game

#6

Post by pronoiac » Mon, Sep 27, 2021, 9:19 PM UTC

debian3 wrote: post #4

You should look into OVH. They have those gaming server and they handle the DDOS protection. I was getting hit by DDOS before, but since I moved there, nothing (except an email from OVH to let me know that my server is being attacked and that they are filtering my trafic). On the server itself you just don't feel anything. Edit: I should add that the DDOS protection is included with the server rental and there is no…

> Instead of cheap VPS servers we have tried getting dedicated servers at larger European hosters like OVH, Hetzner, ihor and NFOrce. The idea is that we have exclusive resources, so the chances of us impacting other customers is lower, and thus we won’t get nullrouted so easily. Largely this works, but the available network bandwidth (usually 1-10 Gbit/s) as well as CPU usage become the limit.

Re: DoS attacks against my online game

#7

Post by ChrisMarshallNY » Mon, Sep 27, 2021, 9:20 PM UTC

Sounds like modern-day “protection rackets.”

I know that, if you own a gambling site, you can look forward to meeting exciting slavs. I didn’t realize they were taking it to other types of games, but I guess that makes sense. Wiseguys coerce Grandma’s Bake Shop, just as they do Moneybags National Bank.

Re: DoS attacks against my online game

#8

Post by dan_wood » Mon, Sep 27, 2021, 9:21 PM UTC

debian3 wrote: post #4

You should look into OVH. They have those gaming server and they handle the DDOS protection. I was getting hit by DDOS before, but since I moved there, nothing (except an email from OVH to let me know that my server is being attacked and that they are filtering my trafic). On the server itself you just don't feel anything. Edit: I should add that the DDOS protection is included with the server rental and there is no…

I don't think OVH is viable in this case, they do mitigate the attack but in my personal experience they also mitigate legit traffic during the attack.

Mind you, this is a process using a single port, with only around 100 active connections. You'll easily see half if not more lose connection during a DDoS attack.

Re: DoS attacks against my online game

#9

Post by dividuum » Mon, Sep 27, 2021, 9:22 PM UTC

Not sure if this is helpful, but I remember reading about the tribes network protocol years ago. IIRC it also UDP based and essentially had a mechanism to request a proof of work depending on server load before accepting any complex packets from a client. You could probably require some proof for their source IP utilizing the HTTPS request already used during server browsing.

Edit: Found it. http://opentnl.sourceforge.net/doxydocs/history.html (the „puzzles“)

Re: DoS attacks against my online game

#10

Post by leath » Mon, Sep 27, 2021, 9:23 PM UTC

debian3 wrote: post #4

You should look into OVH. They have those gaming server and they handle the DDOS protection. I was getting hit by DDOS before, but since I moved there, nothing (except an email from OVH to let me know that my server is being attacked and that they are filtering my trafic). On the server itself you just don't feel anything. Edit: I should add that the DDOS protection is included with the server rental and there is no…

We've had several servers with OVH, including their kimisufi line, So You Start GAME line, their standard GAME line and their standard servers. While I'm sure these are great for common games their DDoS protection seems to get confused by our very non-standard protocol, ending up blocking most if not all traffic from non-connected players.