Thread: BAH Humbug, EA Down

Well if the stats engine is down, it means the master server is down, which means you can't go to the test range or play on any servers. I wanted to test out the Saiga this morning, but seems they're still down.

Seems we have a bit of a celebrity on the server Xfactor is paying us a visit.

Originally Posted by packetshooter

I'm surprised they don't have better DDOS protection in place. Most companies spend big bucks on that stuff. I'd love to know the technical details around the attack.

Moving: my daily reading of Allane's stats has been disrupted! Right up there with the newspaper delivery dude not dropping my paper off this morning...just getting denied all around today!

-Packet

It's just a well executed DDoS...it's extremely difficult to protect against a spread out DDoS...most defense essentially black hole(null route if you're a networking guy) the subnet(s) that are used in the attack. If your attack is spread out enough(meaning the attacking IP's have a large enough varying range), that becomes very,very difficult to do even with all the right equipment because then you isolate yourself from everything useful. You can also get DDoS'd by your ISP being attacked if they don't have proper protection or the attackers max out the bandwidth of link(s) in your path. You also need to have equipment fast enough to process the load and rapidly identify the attackers to null route them - depending on the size of the attack that isn't really realistic. Basically there isn't a 'silver bullet' for DDoS...not much you can do quickly for a well distributed DDoS.

Originally Posted by iLLusioN

It's just a well executed DDoS...it's extremely difficult to protect against a spread out DDoS...most defense essentially black hole(null route if you're a networking guy) the subnet(s) that are used in the attack. If your attack is spread out enough(meaning the attacking IP's have a large enough varying range), that becomes very,very difficult to do even with all the right equipment because then you isolate yourself from everything useful. You can also get DDoS'd by your ISP being attacked if they don't have proper protection or the attackers max out the bandwidth of link(s) in your path. You also need to have equipment fast enough to process the load and rapidly identify the attackers to null route them - depending on the size of the attack that isn't really realistic. Basically there isn't a 'silver bullet' for DDoS...not much you can do quickly for a well distributed DDoS.

especially when it's over 1k known ports.

http://thetechportal.in/2015/01/18/l...omer-database/