Earlier quoted context omitted.
The user you're responding to is Jason Scott of TIA.
Oh sorry, I guess that makes it a very detailed and well though-out response.
[flagged]
The Internet Archive is under a DDoS attack
61–70 of 227 posts
Re: The Internet Archive is under a DDoS attack
#62This is like an arsonist lighting an orphanage or library on fire. Why would you do something like that?
Probably no good reason. In technical terms, some asshole is dicking around.
Re: The Internet Archive is under a DDoS attack
#63[dupe] https://news.ycombinator.com/item?id=40492076
Re: The Internet Archive is under a DDoS attack
#64Re: The Internet Archive is under a DDoS attack
#65What are the ways to manage a DDoS attack, preferably using open source? Don't say Cloudflare because they're an extortionist firm.
I have asked this a few times and never gotten an answer beyond "One day they could turn evil." What is the reason Cloudflare is an extortionist firm? I am way more concerned about Amazon than Cloudflare.
Re: The Internet Archive is under a DDoS attack
#66What are the ways to manage a DDoS attack, preferably using open source? Don't say Cloudflare because they're an extortionist firm.
Cloudflare is not "an extortionist firm". It is a large tech company, where occasionally teams employ shitty sales tactics to meet their numbers, but generally provides a valuable service and acts reasonably ethically.
There are open source tools to mitigate DDoS, but all of them will have some marginal cost to run, and they will all be significantly worse than Cloudflare as they benefit from neither Cloudflare's data moat or scale.
Re: The Internet Archive is under a DDoS attack
#67What are the ways to manage a DDoS attack, preferably using open source? Don't say Cloudflare because they're an extortionist firm.
Aw darn, they are? I was just considering migrating my frontend to them after seeing all the positive reviews. What's the issue?
Re: The Internet Archive is under a DDoS attack
#68Earlier quoted context omitted.
Botnets usually, sometimes amplification attacks against NTP or DNS, although the Chinese government’s Great Firewall also has offensive capabilities known as the Great Cannon, although they are generally used against GitHub because it hosts censorship-circumvention software like VPNs.
Are botnets usually hosted on personal computers or servers or IoT? I'm thinking maybe archive.org can block a whole range of IPs if needed.
Resistance to that kind of simple countermeasure is exactly what distinguishes a DDoS attack from a non-distributed DoS attack. The traffic basically comes from "everywhere". Not literally every IP block and route, but widespread enough that it's difficult to separate from legitimate users without actually processing the traffic (which is what you're trying to avoid by e.g. blocking an IP range).
Re: The Internet Archive is under a DDoS attack
#69What are the ways to manage a DDoS attack, preferably using open source? Don't say Cloudflare because they're an extortionist firm.
If your application can take it, drop it in the application. If your load balancers can take it, drop it on your load balancers. Otherwise you have to get your provider to drop it, if they can take it. Worse case they'll drop all traffic meant for you to protect the rest of their network.
Re: The Internet Archive is under a DDoS attack
#70What are the ways to manage a DDoS attack, preferably using open source? Don't say Cloudflare because they're an extortionist firm.
I have asked this a few times and never gotten an answer beyond "One day they could turn evil." What is the reason Cloudflare is an extortionist firm? I am way more concerned about Amazon than Cloudflare.
There was a recent anonymous critic of Cloudflare on the front page: https://news.ycombinator.com/item?id=40481808