Excuse the ignorance, but couldn't ISPs block the attacks?
Second large Hetzner outage in a week caused by DDoS attack
21–30 of 55 posts
Re: Second large Hetzner outage in a week caused by DDoS attack
#22Re: Second large Hetzner outage in a week caused by DDoS attack
#23Earlier quoted context omitted.
That's 56,536 different ports. Half of everything (that uses UDP), more or less.
I would expect 95%+ of TCP traffic to run on 22 (ssh), 25(smtp), 53(dns), 80(http), 443(https) plus another handful of lower than 1000 ports. Even common dev ports (3000,5000,8080) are below 9000. I don't think that's much different for UDP. Even most games probably rely on something <10,000.
> I don't think that's much different for UDP.
It is, because of the way that UDP is typically used for different applications than TCP. While there are a few old, well known TCP/UDP pairs like 53, UDP is more often used with a dynamic port assignment scheme sometimes with a coordinating TCP protocol - such as SIP/RTP for VoIP that uses >16k, WebRTC, etc. A lot of games uses ports above 10k. https://help.generationesports.com/hc/en-us/articles/3600611...
Re: Second large Hetzner outage in a week caused by DDoS attack
#24Earlier quoted context omitted.
MMOs over UDP?
That's the preferred protocol for ultra-real-time games because a few ms ago is not helpful information to spend time recovering. A sufficiently fast-moving MMO could apply
What MMOs use UDP? Asking sincerely because I have never seen one.
Re: Second large Hetzner outage in a week caused by DDoS attack
#25Maybe, just maybe, rely less on embedded framework on embedded framework that spit JavaScript that gets 95% unused. If for a simple outage apology page the output was 1.7MB, I can only imagine for their normal pages how much it is. At this size I feel only like 10k legit users would unwillingly do the outage anyway. But hey, Kubernetes and Node.js is all the rage nowadays.
"I have only made this letter longer because I have not had the time to make it shorter." - Blaise Pascal
Re: Second large Hetzner outage in a week caused by DDoS attack
#26Earlier quoted context omitted.
That's the preferred protocol for ultra-real-time games because a few ms ago is not helpful information to spend time recovering. A sufficiently fast-moving MMO could apply
What MMOs use UDP? Asking sincerely because I have never seen one.
Anything with real time communications like an FPS would use UDP as stale action data is mostly useless. The latest state of is all that matters.
Most such games will either layer their own streaming channel atop UDP for guaranteed ordered delivery of important messages or use a separate TCP socket as well.
Re: Second large Hetzner outage in a week caused by DDoS attack
#27I thought OVH and Hetzner were the source of a ton of these DDoS attacks. Their IP ranges always seem to be in abuse logs. Cloudflare write in a recent attack: The top networks included the German provider Hetzner Online GmbH (Autonomous System Number 24940), Azteca Comunicaciones Colombia (ASN 262186), OVH in France (ASN 16276), as well as other cloud providers. https://blog.cloudflare.com/15m-rps-ddos-attack/
I mean that makes sense no? Attacks like that rely on compromised servers so it shouldn't be a big surprise large hosting provides are among the biggest attackers. Other large ISPs like digital ocean and Alibaba are among the top attackers in that attack also.
I assume this attack is UDP based unlike the one you linked too.
Re: Second large Hetzner outage in a week caused by DDoS attack
#28>This concerns UDP traffic on port 9000-65535. Does anybody know what usually runs on those ports?
It's interesting that 9000 is the starting port for Ethereum consensus clients, although the participation rate does not seem to be affected.
Re: Second large Hetzner outage in a week caused by DDoS attack
#29Earlier quoted context omitted.
That's the preferred protocol for ultra-real-time games because a few ms ago is not helpful information to spend time recovering. A sufficiently fast-moving MMO could apply
What MMOs use UDP? Asking sincerely because I have never seen one.
You must not be looking very hard, pretty much every game engine uses UDP as the network transport. There are some notable exceptions like Java Minecraft.
Re: Second large Hetzner outage in a week caused by DDoS attack
#30[spiderman-pointing-at-spiderman.gif]
seriously, aren't they commonly the SOURCE of many DoS attacks...
any hosting provider where some random person on the internet and $5 of credit on a prepaid visa card will have this problem.