EVE General Discussion

Down with DDOSING F*****s.

Not really... DDoS attacks are stupidly easy to initiate, and damn near impossible to stop. A quick (and oversimplified) description of how a normal internet connection works, using web browsing as an example...

Client walks up to Server and knocks on door #80.
Server opens the door, says "Hey, how are ya? Which of your pipes should I send the webpages back through?"
Client says "Ehh, #2503 looks pretty bored, use that one."
Server says "Ok, here's your webpage. Happy surfing!"

In a DDoS, though, the process looks like this:
Zombie walks up to Sever and knocks on door #80
Server opens the door, says "Hey, how are ya? Which of your pipes.....?"
Zombie stands there like a... well... like a zombie.
Server says "Uhh, dude, you knocked on the door. How do you want this?"
Zombie wobbles a little, maybe mumbles something to the effect of "Braaaaaiiiiinnnnnnssssss......"
Server says "No, really dude, you asked for it. I can even give you fries with that if you like."
Zombie shambles down the street, dropping a limb here or there for good measure.
Server says, "What a freak, I give up."
Zombie slowly stumbles back and starts the process all over again.

Basically, the idea is that a normal connection is quick and over with. A DDoS, though, ties up the server's resources as it's sitting there, waiting for the zombie (and that's what botnet victims are generally called) to actually complete the service request. That resource exhaustion is what eventually causes the server to crash out (or in our case, disconnect the socket).

there will be no rumor mongering. only mastering.

http://www.buddypedia.com/blog/wp-content/uploads/2014/09/ccp-ping1-300x129.jpg

6 dead hops at London. Not exactly a "minor" thing if you ask me. Had this verified with Time Warner's NOC.


Can't you guys at least get those nodes flagged as wormholes and routed around them?

*Snip* Removed quote of a deleted post. ISD Ezwal.

What kind of customer service would you exactly expect with a ddos attack?

They're neigh on impossible to stop without a tonne of work. Personally, I think CCP are doing a good job as the servers could be down one hell of a lot longer.

I'm definitely not shedding a few tears over a little bit of downtime. It's not exactly an hourly thing.

just make eve a local, single player game.

That is correct, they may not in fact be dead and an ICMP response is so low of a priority that the nodes are either set to, or choosing to ignore (based on it's config) icmp in order to route higher priority traffic

There are firms that specialize in stopping these on the primary backbones. Have you tried these guys -http://www.arbornetworks.com

They have stopped stuff like this many many times, including reflector attacks and massive zombie attacks.

Still ongoing eh?

:Obvious Trollbait: but I will bite anyway...

Your assumption is that CCP knows all the answers and often times, regardless of how smart they are, they do not.

Similarly, many of us are actual security professionals and have been through this before.

However, if you want to criticize folks just offering a helping hand, feel free.