Live data from Hacker News

DoS attacks against my online game

hookrace.net

31–40 of 100 posts

Re: DoS attacks against my online game

#34
post #26

Why would someone DoS a small free game?

From the hint about knowing the likely identity of the attacker, its probably an old and very specific vendetta. Perhaps an early player who was spurned by the community or developer who fell out? As the attacker has run tweaked gaming servers and things, it’s puts it at the upper end of scriptkiddying.

Re: DoS attacks against my online game

#35
post #12

In the US, Cogent offered $900 per month promotion for 10G commit on a 100G burstable circuit. If you rent several rack units and put a used Juniper hardware firewall from eBay in front, that may be one of the cheapest solutions to absorb 100Gbps attacks

Make sure you won't use the 100Gbps in the full month because it might DDoS your wallet ;)

Re: DoS attacks against my online game

#36

Why is ddos still possible? It is possible for isp’s to stop this. There is a proposal for isp level blocking if spoofed source addresses. Also there should be something like an api where I can tell my isp that I don’t want to receive anymore packets from a given source and it should be propagated up the chain.

This is a nice read https://blog.cloudflare.com/the-root-cause-of-large-ddos-ip-...

It is indeed possible for ISPs to stop this, but my guess is that it's cheaper not to :) Large ISPs could require egress filtering for peering with them.

Re: DoS attacks against my online game

#37
post #24

i thought valve offered protection against DDoS attacks, or it's not available for free titles?

I actually received a nice email from someone at Valve about this following this post and we are currently evaluating if we can use it: https://partner.steamgames.com/doc/features/multiplayer/stea...

SDR works well and the latency is decent, but this would probably force you to drop the non-steam release or make some of the servers steam-only?

Re: DoS attacks against my online game

#38
post #24

i thought valve offered protection against DDoS attacks, or it's not available for free titles?

I actually received a nice email from someone at Valve about this following this post and we are currently evaluating if we can use it: https://partner.steamgames.com/doc/features/multiplayer/stea...

Ah! I was going to this actually. I discovered it when Bungie switched Destiny2 over to use it.

Re: DoS attacks against my online game

#40
I worked on a mid-sized online game a few years ago and we experienced several DDoS attacks. I recall one employee tracking down the specific botnet that was rented for the attack against us and we calculated the attacker probably spent a couple of hundred dollars based on the rates.

IIRC, we eventually used AWS Elastic Load Balancer to just soak up the attack, which was a pretty basic SYN flood. Then we waited the attacker out until he got sick of spending money. That temporary redirect definitely impacted performance and cost us some money but it pretty well mitigated the issue. We also spent a bit of time optimizing our servers to drop obvious nonsense requests as quickly as possible but in the end the ELB handled most of the issue for us.

Post reply on HN