BetaArchive Logo
Navigation Home Database Screenshots Gallery Image Uploader Server Info FTP Servers Wiki Forum RSS Feed Rules Please Donate
UP: 42d, 3h, 10m | CPU: 77% | MEM: 5860MB of 11997MB used
{The community for beta collectors}

Post new topic Reply to topic  [ 22 posts ] 
Author Message
 PostPost subject: Switch to Cloudflare        Posted: Sun Aug 20, 2017 4:39 pm 
Reply with quote
Administrator
User avatar
Offline

Joined
Fri Aug 18, 2006 11:47 am

Posts
12534

Location
Merseyside, United Kingdom

Favourite OS
Microsoft Windows 7 Ultimate x64
Hi all

You may have noticed the site going down frequently recently. It looks like we've been under random DNS DDoS attacks for a few weeks now. Hetzner's DDoS protection was doing an OK-ish job at protecting the server but it wasn't quite enough. The initial influx of the attack made it to the server, overwhelming it and knocking it offline. Their reports tell us that it's frequently 30Gbps or more hitting us each time for just a few minutes before their protection kicks in.

We have no idea why we've been targeted but I suspect it's just random, and I had no way to stop it. I tried quite a lot of things to no avail.

In the end I decided to switch us over to Cloudflare for DNS and HTTP routing to see if this helps. If it does, we'll continue to use the service.

If you spot any oddities, please let me know so I can investigate and fix.

Thanks

Andy (Admin)

_________________
Image

BetaArchive Discord: https://discord.gg/epK3r6A


Top  Profile  WWW
 PostPost subject: Re: Switch to Cloudflare        Posted: Sun Aug 20, 2017 7:34 pm 
Reply with quote
Donator
User avatar
Offline

Joined
Wed Feb 23, 2011 12:11 am

Posts
3489

Location
Italy

Favourite OS
Windows, OS/2, DOS
Maybe not on topic but, the ftp servers page gives me the wrong ip address for the download area, I mean, it uses a IP address that's not mine.

_________________
http://forum.softhistory.org


Top  Profile  WWW
 PostPost subject: Re: Switch to Cloudflare        Posted: Sun Aug 20, 2017 7:50 pm 
Reply with quote
Administrator
User avatar
Offline

Joined
Fri Aug 18, 2006 11:47 am

Posts
12534

Location
Merseyside, United Kingdom

Favourite OS
Microsoft Windows 7 Ultimate x64
Thanks. That's an issue with the caching/proxy setup. It should be resolved now.

_________________
Image

BetaArchive Discord: https://discord.gg/epK3r6A


Top  Profile  WWW
 PostPost subject: Re: Switch to Cloudflare        Posted: Sun Aug 20, 2017 9:57 pm 
Reply with quote
Donator
User avatar
Offline

Joined
Thu Aug 28, 2014 2:37 pm

Posts
41

Location
My Mother's Basement

Favourite OS
6.0.4074
Andy, do you think we're getting DDoS'd because of that fake 32TB Windows 10 Leak? Because I think we are.

_________________
STCG
YouTuber, Gamer
mrpijey wrote:
Or someone slipped on a banana peel, fell backwards and accidently hit both the betaarchive.com and "DDoS Express" buttons at the same time.

Me:
https://mega.nz/#!q7oR0LKK!8QRZVYNDIbKu ... FGxfHCvZho


Top  Profile
 PostPost subject: Re: Switch to Cloudflare        Posted: Sun Aug 20, 2017 10:05 pm 
Reply with quote
Donator
User avatar
Offline

Joined
Sun Aug 12, 2012 4:33 pm

Posts
1940

Location
Czechia
SuperThecomputergeek wrote:
Andy, do you think we're getting DDoS'd because of that fake 32TB Windows 10 Leak? Because I think we are.

And who would DDoS us? Microsoft? I don't think that's the case. Especially because this cause is almost two months old by now...

_________________
AlphaBeta, stop brainwashing me immediately!

Image


Top  Profile
 PostPost subject: Re: Switch to Cloudflare        Posted: Sun Aug 20, 2017 10:57 pm 
Reply with quote
Donator
User avatar
Offline

Joined
Thu Aug 28, 2014 2:37 pm

Posts
41

Location
My Mother's Basement

Favourite OS
6.0.4074
AlphaBeta wrote:
SuperThecomputergeek wrote:
Andy, do you think we're getting DDoS'd because of that fake 32TB Windows 10 Leak? Because I think we are.

And who would DDoS us? Microsoft? I don't think that's the case. Especially because this cause is almost two months old by now...

What I'm trying to say is that some random stranger could have found that recently, neglected to look at the date the articles were posted and decided to DDoS us.

_________________
STCG
YouTuber, Gamer
mrpijey wrote:
Or someone slipped on a banana peel, fell backwards and accidently hit both the betaarchive.com and "DDoS Express" buttons at the same time.

Me:
https://mega.nz/#!q7oR0LKK!8QRZVYNDIbKu ... FGxfHCvZho


Top  Profile
 PostPost subject: Re: Switch to Cloudflare        Posted: Sun Aug 20, 2017 11:04 pm 
Reply with quote
Administrator
User avatar
Offline

Joined
Tue Feb 12, 2008 5:28 pm

Posts
7796
Or someone slipped on a banana peel, fell backwards and accidently hit both the betaarchive.com and "DDoS Express" buttons at the same time... I think this theory is much more plausable. Yes, that must be it.

_________________
Image
Official guidelines: The Definitive Guide to BetaArchive :: Abandonware
Tools: Alcohol120% (Portable) :: DiscImageCreator
Listings: BetaArchive Database (beta)
Channels: Discord :: Twitter


Top  Profile  WWW
 PostPost subject: Re: Switch to Cloudflare        Posted: Mon Aug 21, 2017 3:58 am 
Reply with quote
Donator
User avatar
Offline

Joined
Tue Dec 03, 2013 12:00 am

Posts
633

Location
us

Favourite OS
Windows NT 4.0
AlphaBeta wrote:
And who would DDoS us? Microsoft?

Friggen skids... knew they were up to no good.
Anyway, cloudfare should work fairly well. My company uses it and we've prevented a few takedowns using their service.

_________________
Image
Image


Top  Profile
 PostPost subject: Re: Switch to Cloudflare        Posted: Mon Aug 21, 2017 10:33 am 
Reply with quote
Donator
User avatar
Offline

Joined
Sat Jan 27, 2007 10:56 pm

Posts
601

Location
Vienna, Austria
Not sure if thats related to the switch to Cloudflare but the forum is way more responsive (faster) than before to me.


Top  Profile  WWW
 PostPost subject: Re: Switch to Cloudflare        Posted: Mon Aug 21, 2017 11:33 am 
Reply with quote
Administrator
User avatar
Offline

Joined
Fri Aug 18, 2006 11:47 am

Posts
12534

Location
Merseyside, United Kingdom

Favourite OS
Microsoft Windows 7 Ultimate x64
Probably a placebo effect. The site is no quicker or slower. Cloudflare are only handling DNS now (caching was causing issues).

_________________
Image

BetaArchive Discord: https://discord.gg/epK3r6A


Top  Profile  WWW
 PostPost subject: Re: Switch to Cloudflare        Posted: Wed Aug 23, 2017 4:22 am 
Reply with quote
Seems a tad faster as well (at least from the US east coast). Even after clearing the browser cache and cookie data.

EDIT: My ISP is Optimum. Maybe this has something to do with it.


Last edited by TuneableSumo876 on Fri Aug 25, 2017 3:54 pm, edited 1 time in total.

Top
 PostPost subject: Re: Switch to Cloudflare        Posted: Thu Aug 24, 2017 2:14 am 
Reply with quote
Donator
Offline

Joined
Thu Jun 02, 2011 5:58 pm

Posts
163

Location
microsoft land
likely boils down to the dns resolver and how fast the domain lookup to ip takes....


Top  Profile
 PostPost subject: Re: Switch to Cloudflare        Posted: Thu Aug 24, 2017 3:44 am 
Reply with quote
Donator
User avatar
Offline

Joined
Sat Sep 27, 2014 6:32 am

Posts
68

Location
Reno, Nevada

Favourite OS
Windows 7 x64 SP1 (7601)
It feels like it takes longer to resolve over on the US west coast. I have low ping to both my DNS server, and the closest "CloudFlare server farm". I also occasionally will get a Chrome "this page can't be loaded" error, that never happened before.

_________________
OpenTTD | OpenRCT2 | MCArchive


Top  Profile
 PostPost subject: Re: Switch to Cloudflare        Posted: Thu Aug 24, 2017 10:51 am 
Reply with quote
Administrator
User avatar
Offline

Joined
Fri Aug 18, 2006 11:47 am

Posts
12534

Location
Merseyside, United Kingdom

Favourite OS
Microsoft Windows 7 Ultimate x64
The can't load error will happen during a ddos. The DNS resolution should be quick, so I'd blame that on your ISP.

_________________
Image

BetaArchive Discord: https://discord.gg/epK3r6A


Top  Profile  WWW
 PostPost subject: Re: Switch to Cloudflare        Posted: Fri Aug 25, 2017 6:27 am 
Reply with quote
Donator
User avatar
Offline

Joined
Sat Sep 27, 2014 6:32 am

Posts
68

Location
Reno, Nevada

Favourite OS
Windows 7 x64 SP1 (7601)
I'm using Google's DNS servers, and not AT&T's dreadful DNS servers. I also use a pfSense box as a router, so the IP for BA is cached locally.

_________________
OpenTTD | OpenRCT2 | MCArchive


Top  Profile
 PostPost subject: Re: Switch to Cloudflare        Posted: Wed Aug 30, 2017 2:25 am 
Reply with quote
FTP Access
User avatar
Offline

Joined
Wed Aug 09, 2017 1:08 am

Posts
214

Favourite OS
4001
mrpijey wrote:
Or someone slipped on a banana peel, fell backwards and accidently hit both the betaarchive.com and "DDoS Express" buttons at the same time... I think this theory is much more plausable. Yes, that must be it.

Or, even more likely, some 12-year old kid got mad that his FTP application was rejected, and then decided to DDoS us. That's far more likely.

_________________
Pseudo-localized builds are awesome!


Top  Profile
 PostPost subject: Re: Switch to Cloudflare        Posted: Wed Aug 30, 2017 11:41 am 
Reply with quote
Donator
User avatar
Offline

Joined
Sun Aug 12, 2012 4:33 pm

Posts
1940

Location
Czechia
whistler2250 wrote:
mrpijey wrote:
Or someone slipped on a banana peel, fell backwards and accidently hit both the betaarchive.com and "DDoS Express" buttons at the same time... I think this theory is much more plausable. Yes, that must be it.

Or, even more likely, some 12-year old kid got mad that his FTP application was rejected, and then decided to DDoS us. That's far more likely.

Using the "UBER DDOS ATTACC 500 GBIT/S 100% LEGIT NO SCAM NO VIRUS" tool I am pretty sure.

_________________
AlphaBeta, stop brainwashing me immediately!

Image


Top  Profile
 PostPost subject: Re: Switch to Cloudflare        Posted: Wed Aug 30, 2017 11:41 pm 
Reply with quote
FTP Access
User avatar
Offline

Joined
Wed Aug 09, 2017 1:08 am

Posts
214

Favourite OS
4001
AlphaBeta wrote:
whistler2250 wrote:
mrpijey wrote:
Or someone slipped on a banana peel, fell backwards and accidently hit both the betaarchive.com and "DDoS Express" buttons at the same time... I think this theory is much more plausable. Yes, that must be it.

Or, even more likely, some 12-year old kid got mad that his FTP application was rejected, and then decided to DDoS us. That's far more likely.

Using the "UBER DDOS ATTACC 500 GBIT/S 100% LEGIT NO SCAM NO VIRUS" tool I am pretty sure.

Hence why it wasn't as effective as it could have been.

_________________
Pseudo-localized builds are awesome!


Top  Profile
 PostPost subject: Re: Switch to Cloudflare        Posted: Thu Aug 31, 2017 2:57 am 
Reply with quote
To be serious, why don't you just check the IP access logs and ban the IPs it came from for a while?


Last edited by TuneableSumo876 on Thu Aug 31, 2017 1:42 pm, edited 1 time in total.

Top
 PostPost subject: Re: Switch to Cloudflare        Posted: Thu Aug 31, 2017 3:58 am 
Reply with quote
Donator
User avatar
Offline

Joined
Sat Sep 27, 2014 6:32 am

Posts
68

Location
Reno, Nevada

Favourite OS
Windows 7 x64 SP1 (7601)
TuneableSumo876 wrote:
To be serious, why don't you just check the IP access logs and ban the IP it came from for a while?


It's typically significantly more than just 1 IP address that would be attacking the site at once. Hence the name, DDoS (distributed denial-of-service attack).

_________________
OpenTTD | OpenRCT2 | MCArchive


Top  Profile
 PostPost subject: Re: Switch to Cloudflare        Posted: Thu Aug 31, 2017 1:41 pm 
Reply with quote
DarkenMoon wrote:
TuneableSumo876 wrote:
To be serious, why don't you just check the IP access logs and ban the IP it came from for a while?


It's typically significantly more than just 1 IP address that would be attacking the site at once. Hence the name, DDoS (distributed denial-of-service attack).


Ah, noticed my typo there. I was going to say IPs.


Top
 PostPost subject: Re: Switch to Cloudflare        Posted: Thu Aug 31, 2017 1:45 pm 
Reply with quote
Administrator
User avatar
Offline

Joined
Fri Aug 18, 2006 11:47 am

Posts
12534

Location
Merseyside, United Kingdom

Favourite OS
Microsoft Windows 7 Ultimate x64
The problem is that we have no external firewall so we're restricted to the software firewall. The attacks need to be stopped before the server, not at the server, otherwise it defeats the point. Unfortunately an external firewall is prohibitively expensive unless people give larger regular donations to keep the site up.

_________________
Image

BetaArchive Discord: https://discord.gg/epK3r6A


Top  Profile  WWW
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 22 posts ] 




Who is online

Users browsing this forum: No registered users and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  

All views expressed in these forums are those of the author and do not necessarily represent the views of the BetaArchive site owner.

Powered by phpBB® Forum Software © phpBB Group

Copyright © 2006-2019

 

Sitemap | XML | RSS


Affiliate