Why is ddos still possible? It is possible for isp’s to stop this. There is a proposal for isp level blocking if spoofed source addresses. Also there should be something like an api where I can tell my isp that I don’t want to receive anymore packets from a given source and it should be propagated up the chain.
DoS attacks against my online game
21–30 of 100 posts
Re: DoS attacks against my online game
#22Why is ddos still possible? It is possible for isp’s to stop this. There is a proposal for isp level blocking if spoofed source addresses. Also there should be something like an api where I can tell my isp that I don’t want to receive anymore packets from a given source and it should be propagated up the chain.
The key is in the first D: "distributed." A DDoS is designed to look just like legitimate traffic, but coming from many sources all at once. The goal of a successful attack is to both overwhelm the target network by sheer volume, and to make it difficult to stop the attacker without also blocking legitimate traffic. They persist in large part because they exploit the interconnectivity that makes the internet useful in the first place, without which it would cease to be.
Re: DoS attacks against my online game
#23i thought valve offered protection against DDoS attacks, or it's not available for free titles?
Re: DoS attacks against my online game
#24i thought valve offered protection against DDoS attacks, or it's not available for free titles?
I actually received a nice email from someone at Valve about this following this post and we are currently evaluating if we can use it: https://partner.steamgames.com/doc/features/multiplayer/stea...
Re: DoS attacks against my online game
#25If you received anyone asking whether you need services that defend against DDOS, and if you refused, those are probably the guys who initiated the DDOS attack.
From the article, it sounds like they know at least some of the attackers already.
Re: DoS attacks against my online game
#26Why would someone DoS a small free game?
Re: DoS attacks against my online game
#27You should look into OVH. They have those gaming server and they handle the DDOS protection. I was getting hit by DDOS before, but since I moved there, nothing (except an email from OVH to let me know that my server is being attacked and that they are filtering my trafic). On the server itself you just don't feel anything. Edit: I should add that the DDOS protection is included with the server rental and there is no…
We've had several servers with OVH, including their kimisufi line, So You Start GAME line, their standard GAME line and their standard servers. While I'm sure these are great for common games their DDoS protection seems to get confused by our very non-standard protocol, ending up blocking most if not all traffic from non-connected players.
A shot in the dark but maybe implement a wrapper for the protocol in something that looks more like http? Websockets perhaps? Otherwise I think you will have to build your own countermeasures specific to your protocol.
Re: DoS attacks against my online game
#28DoS attacks are something I’ve had to put up with too while hosting game servers since 2008. I run fshost[1] and we see attacks almost weekly. Even though we host mainstream games, we still see legitimate traffic being filtered.
Do you modify any kernel options? net.ipv4.conf.all.rp_filter=1
Re: DoS attacks against my online game
#29Why is ddos still possible? It is possible for isp’s to stop this. There is a proposal for isp level blocking if spoofed source addresses. Also there should be something like an api where I can tell my isp that I don’t want to receive anymore packets from a given source and it should be propagated up the chain.
That exists: DOTS: https://www.rfc-editor.org/rfc/rfc8783.html
Re: DoS attacks against my online game
#30Earlier quoted context omitted.
Thanks for the tip, I didn't know about them. From an initial look $240 for a 1 core vps is a bit too expensive for us.
Also checkout secured.gg [0], I recently discovered them while researching DDoS solutions used by other popular game servers (for Minecraft, and GTA5). I haven't used them but their pricing seemed reasonable to me. [0] https://secured.gg/dedicated
The cheapest server seems to be about as much as we pay for 24 locations today.