Daniel Micay on Twitter: "@RichFelker @ariadneconill @damienmiller We've pretty much won that now. Unfortunately, many of the people involved with that moved on to a different community and have gotten even more aggressive bothering us in even more ways than before. It really never ends. They aren't very good at DoS / DDoS attacks at least." / Twitter

twitter.com/DanielMicay/st This started happening again but github.com/GrapheneOS/inf has deterred it for the time being per

@damienmiller

's suggestion. It's a stopgap for now and will need to be made stricter for IPv6 along with deploying a better solution to this new annoyance.

Quote Tweet

Daniel Micay

@DanielMicay

Sep 5, 2021

Our ns1.grapheneos.org DNS server was targeted by a DoS attack yesterday. They didn't target the DNS service but rather... SSH. That's a new one. Can see the traffic spike but it was hardly anything compared to the usual attacks. Still, SSH buckled. nodeping.com/reports/status

2

7

Replying to

and

what the fuck why would somebody ddos you

2

Replying to

and

The C*pp*rh**d dude has an army of skript kiddies with nothing better to do.

1

Replying to

and

We've pretty much won that now. Unfortunately, many of the people involved with that moved on to a different community and have gotten even more aggressive bothering us in even more ways than before. It really never ends. They aren't very good at DoS / DDoS attacks at least.

4:10 AM · Sep 7, 2021Twitter Web App

Replying to

They've been trying to do those attacks where you send a POST request and then trickle through the content body at super slow speed... to static web servers not accepting POST requests. Setting lower size limits, per-IP limits, etc. has dealt with most low-hanging fruit now.

1

Replying to

Part of why we use OVH is because they have a nice DDoS mitigation system for IPv4 based on FPGAs: hal.archives-ouvertes.fr/hal-01740903/d bittware.com/resources/case It would be nice if they extended the proper DDoS mitigation to IPv6. It's nice not needing to use something like Cloudflare.

2

Show replies

Conversation