DDoS and now something new again?
-
The statistics of our provider are broken because our library doesn't correctly terminate connections, so we just don't know.
Assuming currently only 5% of connections run through a relay, upscaling this to 100% would increase traffic to 20x, so we'd from ~100GB to 2TB. Since prices go down the more bandwith you use with our current provider we'd be at 499$ per month (you can lookup the pricing here https://xirsys.com/pricing) -
The only solution for now is to friend all players you'd want to play with and host for friends only or host with password.
-
@Ctrl-K Or matchmaker, and get suspicious of who you play with, as if your local connection drops, they may be responsible. And the less players, the safer it is.
-
@Ctrl-K said in DDoS and now something new again?:
The only solution for now is to friend all players you'd want to play with and host for friends only or host with password.
I dont think thats the solution actually. I'm enforcing rating so others cant join; Rezy hosts for friends only. It still happens
Although im not 100% sure if it happens to Rezy's lobbies..
-
It is unclear to me whether these sudden disconnects are related to background DDoS activity, or specifically targeted attacks, or unexpected bugs in FAF, or connection issues on the users side, or a combination of all of 'em.
I can offer to look into targeted DDoS cases, but to do so, I need specific logs and timestamps when it occurred.
To be clear: I will not be able to solve the issue, but perhaps together we can find a strategy, or can narrow it down.
Hopefully, the core issue will be resolved in the future - until then, if you have time to spare and want someone to look over your case, please create a moderation ticket in Discord and ping me.
-
@magge said in DDoS and now something new again?:
but to do so, I need specific logs and timestamps when it occurred.
How can we provide it? Is there a need to enable specific log settings in the client?
-
The FAF-related logs would include the game log, IRC log, and ICE log with the exact timestamps when the issue occurred.
Additional helpful logs would be from network diagnostic tools, network/router and/or firewall logs. These are more user/system/environment-specific and need to be handled individually in the ticket itself.
All these (additional) logs may probably beyond the scope of the average user to know about, but I will try to keep the instructions as simple as possible to help find this information.
-
There are many log options in client that are disabled be default. For a guideline one would not only need to specify where to find them, but also which bars to enable to begin with. Should log be DEBUG or TRACE? I don't see IRC log option here, am I missing anything?
-
Who are the people who have access to players IP?
xirsys.com
...
... -
I got DDoS'd the first and only time when I clicked on this guys link. Ever since my internet recovered I seem to be the laggy one in games. I think he was farming our IP's as soon as we open his randomly generated cat girl links. The DDoS happened exactly after the game finished. Replay: #25421055
- How can I see who the host of this game was?
- How can I see past DM conversation with him in FAF? That's where the link is that he sent me, after which I got DDoS'd and never recovered fully to have smooth games again.
-
@Thorkan But how exactly do you know that you got ddosed?
-
@ZLO My Internet went down for several hours. Nothing loaded anymore. Same with other devices on the same Wifi, like my phone.
-
Ever since my internet recovered I seem to be the laggy one in games.
Unless you have a static ip, which is super rare and usually costs extra it is highly unlikely that you notice any difference once the DDoS stops. That sounds like different problems.
-
It would certainly be interesting to find out why your internet went down completely. Maybe you can find some sort of logs in your router?
-
@BlackYps I'ts the landlords router. I don't have access. Does anyone have answers to my 2 questions? That's were we have a clue.
-
@Sainse The logging level should be DEBUG and the box for the ICE log has to be checked. IRC is logged by default.
@Thorkan PM conversations can not be seen again, when the client was closed. When you have indications or evidence that there is a malicious actor, then contact the moderators through a moderation ticket, please.
-
man this is frustrating. half my games i disconnect within 6 minutes of the game starting. Completely drops my internet. These losers need to get a life and stop trying to ruin FAF
-
Same. Now, I failed to connect to players in any lobby -- am I being personally attacked, due to my IP being exposed?
-
Had the first time experiencing this like 2-3 weeks ago when somewhere in the first 0-5 min of a game like 5/6 out of 12 ppl's internet completely bricked.
Since then i've had my internet crash like 2/3 times (most of the time only for +-2 min), and for comparison i normally have issues like once a year.
Dont have any logs sadly didn't think of it, just putting it here as another point on a graph.
-
@LimeZ3_ said in DDoS and now something new again?:
HBO in network security
What is "an HBO in network security"?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login