DDOS Protection

[FurrehIzzy]

The server may need DDOS protection with how big the plans are for the server to become. Especially since it's being run on household equipment with minimal hardware-backed DDOS protections, the biggest protection we have is an automated Discord Whitelist that syncs up with the server. However, if we could look into a stream-scanning bot and some coding to ensure we can identify culprits as they DDOS, as well as better arm ourselves for DDOS attacks such as external open-facing servers, then we would be better equipped to handle a digital attack. Please look into this.

• Izzy

[ninetail2]

• [x] Research how DDOSes are detected and defended against.

  • [x] Detection
  • [x] Threat info capture and storage
  • [x] Appropriate reactions

• [ ] Implement some kind of DDOS protection.

  • [ ] Must log threat id info on server log and client GUI.

• [ ] Ensure it doesn't hit people it's not supposed to (Namely us).

[ninetail2]

Some different ways to crash the server:

• Overloading it from inside (Update tick flood, Piston/Sand trap, etc)
  • This usually requires intervention with a profiler like Opis.
• Spam open connections (ICMP flood, SYN flood, login spam)
  • Counter with rate limits. (How?) I will need to analyze legitimate traffic first.
• Overload with a massive amount of data (BEX attacks)
  • I would hope computers are smart enough these days where we don't have to worry about buffer overflows.