Baldur's Gate : The Sword Coast Chronicles : NWN2 Persistent World

Depends, you can set up a bot net to watch for active replies then execute an attack, or just floodgate and watch as it goes boom.

The other consideration is that the network we are on may open up a pipe for us to get through on original server broadcast, but then traffic gets sucked up by the attackers after a few minutes.

It depends really on how our server/network are set up and how much control we have on it, or if it is shared resources at some point with another set of users.

Someone who is not concerned about the law should find out who is doing this and give their computer a little present. I,d do it if i could but i know next to nothing about computers or hacking.

Any news if we are still in crashtown?

Yes, we are still residing in crashtown

Either someone has a grudge agaist us, or some guy in china is doing this for fun either way, I don't think it is going to stop anytime soon; I've read it is possible to put up defence agaist DDOS attacks and some companies even have software in place to stop it, might be worth looking into?

I'm not sure how a nwn2 server is setup, but wouldn't it possible to host it on a cloud solution? i've worked a little with microsoft azure and it would be fairly easy to set up multiple servers and swap between them once the attack starts? Additionally it would offer scaling of the server on peak times with full servers? Though the price can be a bit tricky to calculate.

Hey ! it's me saturday night !! Welcome back dear ddoser !

RagingPeace wrote:I'm not sure how a nwn2 server is setup, but wouldn't it possible to host it on a cloud solution? i've worked a little with microsoft azure and it would be fairly easy to set up multiple servers and swap between them once the attack starts? Additionally it would offer scaling of the server on peak times with full servers? Though the price can be a bit tricky to calculate.

This would be way too massive to do on a cloud platform. Clouds are for simple file sharing, and do not handle software processes like the NWN2 and NWN1 server require. Not to mention clouds don't generally work well with SQL running on the front end and hold no support for complex queries between the back end and the front end.

Think of a cloud as the filing cabinet of you desk and you'll have an idea of the limitations. Pull/store is about the best you can do on a blank slate cloud.

RE @trogers2
As for how long a DDoS can last... Indefinitely, or until the host machine executing the DDoS is shut down. In the event of a bot network doing it, that is when the big guns such as federal governments get involved, as this tends to be hundreds if not thousands of computers.
Unless I am mistaken, the current provider that this server is hosted on offers a DDoS protection system for those in the 50-100GbpS tiers... I don't think we even come close... NWN1+Forums hosted to 100-200 people at a time was only running me about 20-30GbpS That's more traffic than downloading the full game off Steam or GoG could do in a second.

The ddoser will get bored or run out of money and go away. They always do.

Mac wrote:The ddoser will get bored or run out of money and go away. They always do.

Sure he will, at least until next Saturday...

Mac wrote:The ddoser will get bored or run out of money and go away. They always do.

Funny... That would depend on the "why" of the attack.
Banned player with access to a bot network, he could do it for as long as he wants.
Player from a competing server with access to bot network, same thing.

The more I look into how our server seems to be positioned, the less likely I feel this is not a targeted attack, so the next thing to find out is the "why".

For that the question is, why Saturday, and how far back has it been going.

I say we all pitch in to hire a real hacker to kick this guy's teeth in. Script kiddies ruin everyone's fun.

HazNpho wrote:

Mac wrote:The ddoser will get bored or run out of money and go away. They always do.

Funny... That would depend on the "why" of the attack.
Banned player with access to a bot network, he could do it for as long as he wants.
Player from a competing server with access to bot network, same thing.

The more I look into how our server seems to be positioned, the less likely I feel this is not a targeted attack, so the next thing to find out is the "why".

For that the question is, why Saturday, and how far back has it been going.

As far as i know it has been going on for quite some time, it gets progressively worse then it stops for like...2 months or so ? and then it comes back with the same usual pattern.

kellendril wrote:I say we all pitch in to hire a real hacker to kick this guy's teeth in. Script kiddies ruin everyone's fun.

I'm down

And down again... Starting to think the weekends a write off.