Topic: Another DDOS ? - page 2. (Read 4331 times)

I have some ideas for how to mitigate the DDoS, but I might not finish it today.

As someone mentioned earlier, I don't want to use Cloudflare because Cloudflare can see/modify all encrypted traffic, they are a massive central point of failure on the Internet, IMO they probably assist and are supported by the NSA, they only protect against fairly small-scale attacks, and they really make life difficult for Tor users.

The UDP flood is causing high packet loss. What this will look like when browsing the forum is:
 - When you first connect to the forum after not browsing any pages for a while, it might be especially slow, and it might time out. After it completely fails / times out, just keep trying. It will eventually work.
 - After you first connect, browsing should be much smoother because at this point you'll already have a TCP connection open, though it might be a bit slow, and occasionally a page might time out.
 - If the page times out while posting, press the refresh button in your browser and accept any warning it gives you. Keep trying until it goes through.

As someone mentioned earlier, I don't want to use Cloudflare because Cloudflare can see/modify all encrypted traffic, they are a massive central point of failure on the Internet, IMO they probably assist and are supported by the NSA, they only protect against fairly small-scale attacks, and they really make life difficult for Tor users.

An official announcement has been made on the forum's twitter page by theymos :

it was posted 14h ago.

Theymos has never stated is was a DDoS. If you read the other pages, you would know that.
~snip~

DDoS attack

Hm, it looked to me like some sort of upstream networking failure, but now it happened again on a different IP, so maybe it is a difficult-to-detect DDoS. I'll continue to investigate.

[...]
I'm not going to use Cloudflare for bitcointalk.org. Cloudflare is a massive central point of failure to the Internet. Tons of sites (including most large Bitcoin sites) use it. Additionally, in most cases Cloudflare can undetectably read any encrypted traffic passing through their service because they have the site's HTTPS key. Even if you use their keyless HTTPS feature, they can still read your traffic (though this is detectable with something like Certificate Patrol) because they have an agreement with a CA which allows them to issue whatever certificates they want (they are essentially a CA). Also, I've heard that Cloudflare is not especially effective at stopping many types of DDoS attack.

Instead, I purchased DDoS protection that works at a lower level. After filtering, it sends user TCP traffic to the forum's server verbatim. This eliminates the need for giving up the forum's HTTPS key. It seems to be effective at stopping this attacker's traffic, but it may be introducing some periodic downtime/slowness/latency. We're still looking into it. DDoS protection services (even the most expensive ones) are notorious for often being useless, shady, or unreliable, so who knows whether this service or any future ones I may try will end up working out... Unfortunately, the Internet is just particularly weak to DDoS attacks, and there are no great solutions available.

Yes, it's very annoying but there is nothing that we can do. I only make sure that before I post something, I copy it to avoid having to type everything from scratch again as the page turns either blank, or shows an error.

In the last 2 days the forum was offline many times ...

If there is a DDOS: I don't understand: why to DDOS a forum?  What is the benefit?  There are no hideen coins in here (except those from theymos pocket)  

Apparently using a VPN can fix the connection issues. I assume some areas have Bitcointalk blocked out for some reason. Is this due to a new hosting service or on purpose?

The connection is still not perfectly reliable. The forum frequently can't be reached.
Also I have noticed that when the site is down, the favicon is also changed :



Hope it gets posted

The connection is still not perfectly reliable. The forum frequently can't be reached.
Also I have noticed that when the site is down, the favicon is also changed :



Hope it gets posted