EVE General Discussion

There is no easy way to prevent DDOS attacks. If Blizzard can't defend against DDOS attacks what makes you think CCP can? I remember when Blizzard got DDOS'd and all of their servers in EU, Oceana and US were down all at the same time because of DDOS. You just can't do it easily especially since it seems to be a large scale attack.


Also if you think you can do better, im sure CCP is more than willing to hire you for your skills!

Then go play those. We really won't miss you. Kthxbai.

Oh, you've personally logged my game vs forum time have you? Stalker.

Hard to take someone who claims to be a PVP'er but has no killboard seriously too.

Then let me tell you to go play another game, nobody can stop a DDoS. There has been internet issues all over the place not just with EVE for the last few months.

probably because neither game is worth playing for anywhere near 2 months.

If you can prevent any and all DDoS attacks towards one small server cluster 100% of the time, you will become one of the richest men on this planet.

Why don't you go and implement those changes and come back in a week to report how they worked?

Here's the basic idea on what happens: Networking equipment have ports for handling traffic. Those ports have a certain throughput in number of connections or in gbps, whichever caps first. If there is an excessive amount of connections, the device cna try to start filtering out known attack vectors or connections in a protocol which is not used by the service in question. This works up until the limit is reached and then there are 2 default states the port can drop to: drop-all or allow-all.

Dropping traffic means that even the good traffic is discarded and not forwarded but it'll cut off the pressure on the whole network. At the same time a load balancer will start to utilize other ports for good traffic and in an ideal situation you'd have a 1-2sec hiccup. In some cases that hiccup is shown as a lag spike, other times you might get booted off the server. This is the price you have to pay for having a somewhat clean connection.

Allowing all traffic would actually cause even more problems as the resilient border devices would let everything through to the way more fragile routers and servers which are designed for a certain load which is fraction of what border devices are designed for.

What you need to do to stop DDoS is to cut the source of the attack; infected machines, botnets and all those ghetto-setups with 1500 cellphones with one-time use 3G sim cards. Either you have to become a psychic to see which devices will become malicious to your network before they do and block them magically with a neural interface which can fill filtering tables with the power of your mind OR you disallow people from using the internet in the whole world.

If this is too high tech for you, here's a tl;dr:

Internet is not a series of tubes which gets clogged up with racing horses and porn, it's more complicated.

As there is already a thread on the same topic, this one gets a lock.

The Rules:
17. Redundant and re-posted threads will be locked.

As a courtesy to other forum users, please search to see if there is a thread already open on the topic you wish to discuss. If so, please place your comments there instead. Multiple threads on the same subject clutter up the forums needlessly, causing good feedback and ideas to be lost. Please keep discussions regarding a topic to a single thread.