narumii
commented
3 years ago You could argue that this is a ddos attack and can't be fixed by bungeecord/waterfall.
Yes thats true, bungeecoord/waterfall had many exploits but md5 claims that they don't even work xd, waterfall does something but still their "antidos" is trash.
However, the host machine was using about 30% cpu and 10% of it's network resources, it's really only bungeecord that is struggeling to keep up with that many requests.
Imo bungeecord has fucked networking system, even vanilla's one is better xd.
So probabbly it's a encryption response or other packet that can has very big data, waterfall and bungeecord doesn't have good limiter for it
antbig
Janmm14
Sneakometer
electronicboy
Xernium
Hello Waterfall community, i'm owning a smaller minecraft server with about 50 max concurrent players. I am recently facing bot attacks where multiple ips (proxies?) connect to the waterfall proxy, each allocating 16MB direct memory and thus rendering the server unusable in seconds.
I've allocated 512MB memory to waterfall, which was plently for the last 3 years. I still doubled it to 1 gig for now, but the DOS "attack" still manages to fill the ram in seconds.
This exception is spammed to console during attack:
You could argue that this is a ddos attack and can't be fixed by bungeecord/waterfall. However, the host machine was using about 30% cpu and 10% of it's network resources, it's really only bungeecord that is struggeling to keep up with that many requests.
I do use iptables to rate limit new connections per ip to the bc, but this does not really help as the connections come from too many different ips (proxy list?). I now added a global rate limit for syn packets to bungeecord, which somewhat mitigates the attack by not crashin the server. However, no new players can join while an attack is running. So this is not a permanent option :/
I also don't make profit from my server, so i can't afford professional layer 7 ddos mitigation. Hoping to get help here is my only option. Any help is appreciated.