Yes but Evoload need to be stong enough to fight for this yes, since from 2 days getting this problems really felling disappointed
Evoload.io - Discussion Topic.
- Thread starter Evoload-Jason
- Start date
- Status
Hello i have just created account because evoload is not working for 2 days now. I was curious why now i know that is an attack but there is a thing that make me curious. Once @Evoload-Jason said that he upgraded protection to 150Gbps but i saw screen with attack for 110Gbps so it's 40Gbps away from protection you have. Could you explain that? Was it a lie or attack is bigger than 150Gbps ?
ThE_AdMiRaL
Member
I think the Problem is, that the attacker is switching IPs all the time, and that he probably has access to a wide array of servers or a big botnet to cycle the IPs as soon as they get blocked. So there is at least some downtime between the countermeasures can block those IPs again, I guess.
Maybe it would make sense to scale the backend servers up via VMs and putting a loadbalancer or a proper framework like Istio in front of it.
Maybe it would make sense to scale the backend servers up via VMs and putting a loadbalancer or a proper framework like Istio in front of it.
Third day problems with DDOS attack? The site works for two minutes, the rest of the day is more offline than online. Compared to the competition, the service is excellent and has many options, but what is it worth when the situation with a DDOS attack is without a solution.
I am not overly optimistic about all this. A pity!
I am not overly optimistic about all this. A pity!
Last edited:
What Evoload is doing to stopped this attack he must need to reply and tell his user to be patients there are the things we are doing but there is nothings no responding from the Evoload
this is really bad jason just keep giving update
If the issue did not solve today also so i have to think alternative. Sorry Jason, i cannot let my visitors visit website with blank page.
this is really bad jason just keep giving update
If the issue did not solve today also so i have to think alternative. Sorry Jason, i cannot let my visitors visit website with blank page.
Last edited:
Evoload-Jason
Active Member
Hello, we are working on it
darkestblue
Active Member
can you also ask something more arogant and stupid? deal with IT technology and don't just compare numbers that you don't understand ...
Last edited:
Yeah you're the one who will be saying that i don't understand them. Buddy go somewhere else as you post posts like this in every thread. You're just troll so it's my final response to you.
@Evoload-Jason i still wait for your answer regarding the protection.
@Evoload-Jason i still wait for your answer regarding the protection.
darkestblue
Active Member
then ask naively stupid further, but don't be surprised if you continue to be ignored or laughed at
Good. We will talk in court then.
ThE_AdMiRaL
Member
I really wonder why the tone is so rough in this forum at times. I also just created an account today, but have been reading for a few weeks. As soon as something does not work anymore, people start accusing and insulting.
Sure, the situation is annoying now. But being a dev myself, and also having experienced multiple DDoS attacks in the past, I can only recommend to leave @Evoload-Jason working on improving stability and not get crazy if he does not answer every hour. Even though it would be a good comms strategy, to post an update every 1-2 hours and roughly explain what the current status is, so people are calmed.
Good thing about DDoS attacks is, that they can't be hold up forever, either because its getting more and more expensive (because Protection layers are made more powerfull over time), or because authorities will take down machines.
So for now I am confident.
Sure, the situation is annoying now. But being a dev myself, and also having experienced multiple DDoS attacks in the past, I can only recommend to leave @Evoload-Jason working on improving stability and not get crazy if he does not answer every hour. Even though it would be a good comms strategy, to post an update every 1-2 hours and roughly explain what the current status is, so people are calmed.
Good thing about DDoS attacks is, that they can't be hold up forever, either because its getting more and more expensive (because Protection layers are made more powerfull over time), or because authorities will take down machines.
So for now I am confident.
Evoload-Jason
Active Member
Hello Everyone,
The platform is stable now,
in order to explain what is going on or what's happens.
Yesterday it was down due layer 7 attacks, multiple IP's attacking the streaming / download pages, once we have mitigated the attack he started attacking the API pages with over +100.000k/requests per second causing our DB to crash this was mitigated as well.
After that he tried to login to our dashboard as user, and start sending again + 100.000k request to our Files,Folders,Statistics etc page, we have mitigated that as well.
So any Layer 7 for him is impossible now.
We are using a WAF provided by our DC which has xxx Gbps protection, he tried to attack that but failed to get it down, he was searching probably in DNS histories service until he found out our Real backend IP, which had lower DDoS protection (40Gbps)
He started attacking it with Layer3/Layer4 attacks caused our server to be null-routed every few hours/minutes with a attack between 60Gbps and 110Gbps.
As @ThE_AdMiRaL said, every attack mitigated makes the platform even more stable and immune against the same attack
We have changed our Backend IP now
We don't expect any more downtime now, platform should be stable and secured against most types of attacks.
@-Fig-
To be honest not really
The platform is stable now,
in order to explain what is going on or what's happens.
Yesterday it was down due layer 7 attacks, multiple IP's attacking the streaming / download pages, once we have mitigated the attack he started attacking the API pages with over +100.000k/requests per second causing our DB to crash this was mitigated as well.
After that he tried to login to our dashboard as user, and start sending again + 100.000k request to our Files,Folders,Statistics etc page, we have mitigated that as well.
So any Layer 7 for him is impossible now.
We are using a WAF provided by our DC which has xxx Gbps protection, he tried to attack that but failed to get it down, he was searching probably in DNS histories service until he found out our Real backend IP, which had lower DDoS protection (40Gbps)
He started attacking it with Layer3/Layer4 attacks caused our server to be null-routed every few hours/minutes with a attack between 60Gbps and 110Gbps.
As @ThE_AdMiRaL said, every attack mitigated makes the platform even more stable and immune against the same attack
We have changed our Backend IP now
We don't expect any more downtime now, platform should be stable and secured against most types of attacks.
@-Fig-
To be honest not really
- Status