TPU Connectivity Issue. 6/17/09

[Flyordie]

What hardware is backing TPU up if I may ask? It was killing my server during those DDOS's... all 8 cores were at 98-100% the whole 13m (till I caught it)... horribly mean these Chinese and North Koreans are...

 

[W1zzard]

one core 2 duo for frontend and another one for the database. but very very heavily optimized setup with several caching layers, memcached, php opcode cache etc. my educated guess is be that we'd need 3 or 4 frontends and 2 db servers if it weren't optimized

 

[Solaris17]

one core 2 duo for frontend and another one for the database. but very very heavily optimized setup with several caching layers, memcached, php opcode cache etc. my educated guess is be that we'd need 3 or 4 frontends and 2 db servers if it weren't optimized

Am i safe in assuming you opted the fedora install or installed a slimmed version to reduce overhead as well correct?

 

[W1zzard]

Am i safe in assuming you opted the fedora install or installed a slimmed version to reduce overhead as well correct?

fedora/centos on all boxes. there is no overhead, just uninstall/turn off what you dont need. in return you get a standard system that is very well supported by thousands of users around the world

important: get rid of selinux, audit, redhat firewall

 

[Solaris17]

fedora/centos on all boxes. there is no overhead, just uninstall/turn off what you dont need. in return you get a standard system that is very well supported by thousands of users around the world

important: get rid of selinux, audit, redhat firewall

Running Cent 5.3 on mine good little system

 

[Mussels]

i'd just block the chinese ranges with a text only page saying this range has been blocked due to DDoS attacks - use a proxy if you want access.


Thing is, proxies are slow enough that it would dilute the attacks.

 

[btarunr]

No, the Chinese like TPU, and GPU-Z.

Besides, I think W1z already made it public that TPU is, afterall, a Hong Kong based company. Not European, not American.

Not Aussie either.

 

[Mussels]

No, the Chinese like TPU, and GPU-Z.

Besides, I think W1z already made it public that TPU is, afterall, a Hong Kong based company. Not European, not American.

Not Aussie either.

true, but i like my TPUs.


Image verification for downloads/access to anything not the frontpage for non logged in users sounds bloody smart to me.


edit: i saw a good one the other day, which asked simple questions.

"you drive a"

A: Car
B: Trampoline

You eat with a
A: Fork
B: Dog

 

[btarunr]

That won't achieve anything. The "image verification" page will be accessed countless number of times, and our servers will be choked anyway.

 

[Mussels]

That won't achieve anything. The "image verification" page will be accessed countless number of times, and our servers will be choked anyway.

that may hurt less than what is currently being done.

The question method has less overhead than an image based system too - you can just throw in say, 50 combinations manually and leave them be

 

[btarunr]

that may hurt less than what is currently being done.

The question method has less overhead than an image based system too - you can just throw in say, 50 combinations manually and leave them be

End result still is choked servers, so it doesn't hurt any less. On the other hand, I hate image verifications.

TPU doesn't have a dearth for bandwidth. TPU doles hundreds of terabytes of downloads each year. What a DDoS does is it occupies too many available connections to the server, and clogs the lines for others to access it. They don't want to pointlessly download tons of data. So nothing is achieved with an image verification. They'll access the verification page and clog the lines anyway.

 

[Mussels]

if they're limited to one connection per IP every 10 seconds to the verification page, they cant hog connections now can they?


I dont actually know how this stuff works, but somethings getting ideas from the uneducated can lead to a working solution

 

[dr emulator (madmax)]

No, the Chinese like TPU, and GPU-Z.

Besides, I think W1z already made it public that TPU is, afterall, a Hong Kong based company. Not European, not American.

Not Aussie either.

whaaat yikes so it is someone trying to f

things up ,a rival no doubt ,ha i knew it .i'm not often wrong
well if i have any spare cash i'll move the base over here that'll sort it let them try and mess me up

 

[Steevo]

I fall back to my original idea, block large blocks, or have a script run every XX seconds and track the connections and when a threshold is reached kick the IP, and have a dump run on the front end of the script.


Just takes a bit more processing HP.

 

[[I.R.A]_FBi]

couldnt connect last night @ 2 am

 

[W1zzard]

yep intensity of the attacks increased this night and progressed over the day.. its better now but still higher than usual

 

[[I.R.A]_FBi]

the duration was for 15 .. i just went to bed

 

[Nick89]

I couldn't get on TPU last night ether.

 

[Mussels]

makes me wonder if its worth it implementing something stronger - if the attacks are increasing in severity, then its becoming viable to use stronger (more annoying/more CPU intensive on the server) methods to counter it.

 

[Flyordie]

Has this been suggested before- A dedicated front end that only allows "registered" IPs to ping it? It would ignore all other pings.

 

[btarunr]

Our guests/registered users ratio stands at around 20:1 (for every 20 guests, there's one registered user).

 

[Easy Rhino]

first, who would attack this awesome site? second, just give me their home address and i will take care of it

 

[W1zzard]

first, who would attack this awesome site? second, just give me their home address and i will take care of it

banned users, competition or random internet kid. Can't think of anything else.

 

[Easy Rhino]

banned users, competition or random internet kid. Can't think of anything else.

that makes me sad

 

[DrPepper]

banned users, competition or random internet kid. Can't think of anything else.

Nazi ninja's