Since I play via my own vpn, i can see what is attacking me when I play faf.

Attack type: UDP DNS Fragment Flood
Source ports: Variable high ports (commonly around 40000)
Destination port: UDP 53 (DNS)
Always relatively short (but enough to ruin a match).

And no, nothing else runs on this server, and I only ever use it when I play faf.

So how do I help? Logs? If so, where do I upload them?

@Brutus5000 Is it possible to have a client update for the weekend where all connections go through relay only, to see what happens?
Better / worse / the same.

Currently completely unplayable.
Unless you are already working on a good solution, I don't see any other plan that can be implemented quickly to possibly improve the situation.

At the very least, further steps could then be planned based on the knowledge gained.

Yes, this is what we did for now. If this solves it, we'll work on more cost-effective solutions to keep it like that.

Currently completely unplayable.
Unless you are already working on a good solution, I don't see any other plan that can be implemented quickly to possibly improve the situation.

At the very least, further steps could then be planned based on the knowledge gained.

@Lenkin
Just a "what if"
What if GAF has all the same vulnerabilities, but just doesn't get ddosed?
I can only guess the reasons why.

My understanding is GAF does get DDOSed, but it routes all its connections through a central server so it's much less of a problem. It can do that because it has MUCH fewer players than FAF does

Really unfortunate stuff, although I can't say I'm surprised people this manchildtarded lurk among the playerbase.

• https://help.steampowered.com/en/faqs/view/1433-AD20-F11D-B71E

The solution is to work via relays. Which is what Brutus describes here:

@Brutus5000 said in DDoS and now something new again?:

The ice adapter can do that in theory. This is called using a relay server. We used to run our own but they get killed by DDoS too. Now we are running the relay servers at a 3rd party provider but they are very expensive. so we cannot allow everybody to use it just to hide their ips.

We tried a cheaper provider but it doesn't work with the current ice adapter. So we're trying to rewrite it, but it doesn't work reliably beyond 1v1

We're not there yet though. And we could really use the help of people with the right expertise to investigate it further.

HBO in network security

What is "an HBO in network security"?

Since then i've had my internet crash like 2/3 times (most of the time only for +-2 min), and for comparison i normally have issues like once a year.

Dont have any logs sadly didn't think of it, just putting it here as another point on a graph.

@Thorkan PM conversations can not be seen again, when the client was closed. When you have indications or evidence that there is a malicious actor, then contact the moderators through a moderation ticket, please.