DDoS
Hi, habra people.
Let me apologize for the inconvenience. Yesterday's problems with the accessibility of Habr were caused by a DDoS attack.
The attack began at about 10 am 01/23/08. It was the most powerful attack in the history of such attacks on Habrahabr. According to our estimates, approximately 15,000 nodes participated in it — a botnet from computers located primarily in the east and third world countries.
It is characteristic that the people behind the attack constantly adjusted tactics and reacted to actions taken from our side.
It is necessary to pay tribute to the specialists of our hoster, the Karavan company: they reacted more than promptly and got down to business, bypassing all the necessary documentary formalities in such cases. We were allocated a new subnet, the traffic of which passes through the Cisco Guard, so after updating the DNS zones, the necessary traffic filtering policies were created and after a while the botnet forgot the way to our servers.
')
We explain the inaccessibility of our projects for some users during this night by the fact that it takes considerable time to spread the changes in the DNS zones and because we ourselves, in a fit of passion, “pulled the nuts too much”, cutting off the attack (we managed to ban half of the office and even Jovan, who generally slept at this time).
For our part, we consider what happened as a positive experience: it allowed us to reach a new level in cooperation with the hosting provider and significantly optimize the performance of our hardware and software. Now getting us will not be as easy as it could have been done just a few days ago.
ps We have absolutely no idea who needed it and why - law enforcement agencies will understand.
pps Many thanks to the employees of the Karavan company and personally to Dmitry Kanaev and Sergey Sosnin for understanding and prompt resolution of issues.
Let me apologize for the inconvenience. Yesterday's problems with the accessibility of Habr were caused by a DDoS attack.
The attack began at about 10 am 01/23/08. It was the most powerful attack in the history of such attacks on Habrahabr. According to our estimates, approximately 15,000 nodes participated in it — a botnet from computers located primarily in the east and third world countries.
It is characteristic that the people behind the attack constantly adjusted tactics and reacted to actions taken from our side.
It is necessary to pay tribute to the specialists of our hoster, the Karavan company: they reacted more than promptly and got down to business, bypassing all the necessary documentary formalities in such cases. We were allocated a new subnet, the traffic of which passes through the Cisco Guard, so after updating the DNS zones, the necessary traffic filtering policies were created and after a while the botnet forgot the way to our servers.
')
We explain the inaccessibility of our projects for some users during this night by the fact that it takes considerable time to spread the changes in the DNS zones and because we ourselves, in a fit of passion, “pulled the nuts too much”, cutting off the attack (we managed to ban half of the office and even Jovan, who generally slept at this time).
For our part, we consider what happened as a positive experience: it allowed us to reach a new level in cooperation with the hosting provider and significantly optimize the performance of our hardware and software. Now getting us will not be as easy as it could have been done just a few days ago.
ps We have absolutely no idea who needed it and why - law enforcement agencies will understand.
pps Many thanks to the employees of the Karavan company and personally to Dmitry Kanaev and Sergey Sosnin for understanding and prompt resolution of issues.
Source: https://habr.com/ru/post/19243/
All Articles