31–40 of 55 posts
Excuse the ignorance, but couldn't ISPs block the attacks?
- You need to identify the traffic to be filtered and the post states: "Due to always different destinations (IPs, ports, packet size) (..)"
- You need to maintain some agreement with a large number of ISPs
- You need to maintain some gossiping infrastructure to these ISPs
- ISPs may not care about your DDoS attack
>This concerns UDP traffic on port 9000-65535. Does anybody know what usually runs on those ports?
I thought OVH and Hetzner were the source of a ton of these DDoS attacks. Their IP ranges always seem to be in abuse logs. Cloudflare write in a recent attack: The top networks included the German provider Hetzner Online GmbH (Autonomous System Number 24940), Azteca Comunicaciones Colombia (ASN 262186), OVH in France (ASN 16276), as well as other cloud providers. https://blog.cloudflare.com/15m-rps-ddos-attack/
A wise network operator once told me - never shit on people when they are under attack. Because in the not too distant future you are going to be the victim.
Excuse the ignorance, but couldn't ISPs block the attacks?
As a participant you can avoid paying to send outbound attack traffic, and also identify attack sources within your own network.
At their size, don’t they have some kind of hardware-level packet filtering ability like cloudflare to protect against these attacks?
Not if the level of incoming bandwidth exceeds the available bandwidth of the circuits involved.. you can't filter it when the link is saturated. Cloudflare uses other techniques like global distribution so aggregate bandwidth is higher than the attack bandwidth
At their size, don’t they have some kind of hardware-level packet filtering ability like cloudflare to protect against these attacks?
I am wondering what the attacker's intent is
Earlier quoted context omitted.
That's the preferred protocol for ultra-real-time games because a few ms ago is not helpful information to spend time recovering. A sufficiently fast-moving MMO could apply
What MMOs use UDP? Asking sincerely because I have never seen one.
WoW, FFXIV, ESO, GW2, etc
Some might use TCP for login and character select, but its UDP while playing.
Earlier quoted context omitted.
Not if the level of incoming bandwidth exceeds the available bandwidth of the circuits involved.. you can't filter it when the link is saturated. Cloudflare uses other techniques like global distribution so aggregate bandwidth is higher than the attack bandwidth
does anyone else have a network that can do what Cloudflare can do? seems like magic sometimes.