this post was submitted on 22 Jul 2023
128 points (93.8% liked)

Lemmy.World Announcements

29063 readers
3 users here now

This Community is intended for posts about the Lemmy.world server by the admins.

Follow us for server news 🐘

Outages πŸ”₯

https://status.lemmy.world

For support with issues at Lemmy.world, go to the Lemmy.world Support community.

Support e-mail

Any support requests are best sent to info@lemmy.world e-mail.

Report contact

Donations πŸ’—

If you would like to make a donation to support the cost of running this platform, please do so at the following donation URLs.

If you can, please use / switch to Ko-Fi, it has the lowest fees for us

Ko-Fi (Donate)

Bunq (Donate)

Open Collective backers and sponsors

Patreon

Join the team

founded 1 year ago
MODERATORS
 

Today, like the past few days, we have had some downtime. Apparently some script kids are enjoying themselves by targeting our server (and others). Sorry for the inconvenience.

Most of these 'attacks' are targeted at the database, but some are more ddos-like and can be mitigated by using a CDN. Some other Lemmy servers are using Cloudflare, so we know that works. Therefore we have chosen Cloudflare as CDN / DDOS protection platform for now. We will look into other options, but we needed something to be implemented asap.

For the other attacks, we are using them to investigate and implement measures like rate limiting etc.

(page 4) 50 comments
sorted by: hot top controversial new old
[–] tylerthehuman@lemmy.world 0 points 1 year ago (2 children)

ah, rate limits. something twitter was absolutely blasted for but makes sense here because we love lemmy :) even though it serves the same purpose.

load more comments (2 replies)
[–] ryannathans@lemmy.world 0 points 1 year ago (5 children)

I assume you are rotating ip addresses after swapping to cloudflare?

load more comments (5 replies)
[–] gobbling871@lemmy.world 0 points 1 year ago (1 children)

Wonder why this wasn't done earlier. Hopefully we'll see less of the 404-type pages that has plagued this instance.

[–] null@zerobytes.monster -1 points 1 year ago

Dont understand this either, who the fck would expose real server IP in first place?

[–] cerberus@lemmy.world 0 points 1 year ago (1 children)

Excellent! CDN and DDoS protection are essential. Also would recommend looking into load balancing if you haven’t.

[–] fkn@lemmy.world -1 points 1 year ago (1 children)

Load balancing applications is significantly more complex than most people anticipate. In the naive implementation it typically increases database loads and reduces site performance. Static content balancing is trivial, and cloudflare will do that by default, but implementing the hard part will require careful software development to prevent a naive implementation from bringing down the database. Sticky sessions are just the beginning.

[–] just_another_person@lemmy.world 0 points 1 year ago (1 children)

I mean...this take is naive. Putting a load balancer up in front of a few servers isn't going to do anything to their database? No idea where you're even getting that from, as they are completely unrelated.

The total number of application servers accessing the database is what would affect db performance in a negative way, and load balancing doest automatically mean "do something stupid like spin up 100 app servers when we normally use 3". All you've described is a need for a db proxy in the off chance that Lemmy code has horrible access patterns for db transactions.

You can take your uninformed nerd rage elsewhere now, thank you.

[–] fkn@lemmy.world 0 points 1 year ago (1 children)

You obviously haven't written one.

Simple case, without sticky sessions:

2 app servers behind a naive load balancer. Assume an actually restful service. Also assume a reasonable single app design with persistent db connections and db caching. Assume a single client. Single clients first connection comes in to app servers 1. App servers 1 makes db connection and grabs relevant data out of db. Caches information for client expecting a reconnect. Client makes second call, load balancer places it on app server 2, app servers 2 now makes a second connection and queries the data.

The db has now done twice the work for a single client. This pattern is surprisingly common and as the user count grows this duplication significantly degrades cache performance and increases load on the db. It only gets worse as the user count increases.

[–] just_another_person@lemmy.world 0 points 1 year ago (3 children)

It's a common scenario for someone who doesn't understand the point of putting a load balancer in front of a stateful application, perhaps. Not for anyone trying to solve a traffic problem.

No idea where you are getting your ideas from, but this is an absolutely uninformed example of how NOT to do something in an ideal way.

load more comments (3 replies)
[–] Obstagoon@lemmy.world -1 points 1 year ago

Lmaooo Cloudflare is in the comments downvoting criticism

[–] 6mementomori@lemmy.world -1 points 1 year ago

meanwhile it was giving me incorrect login error and I had thought someone got into my account lol

[–] Obstagoon@lemmy.world -3 points 1 year ago (1 children)

I could swear, and also could be wrong, but someone said Cloudflail doesn't handle ddos attacks. Which adds more to your comment if true lol

load more comments (1 replies)
load more comments
view more: β€Ή prev next β€Ί