Status as of Friday, June 30, 2017
Posted: Fri Jun 30, 2017 8:02 am
Good morning! It looks like everyone is back, after a second round of attacks.
- These attacks are difficult not because they are sophisticated or hard to understand, but because we can't get information from the companies we are dealing with. We still don't even know the specific types of attacks, or how large they are.
- Chris did determine that this latest attack seemed to be a result of a large number of UDP packets. OpenVPN runs over UDP, because having two layers of TCP could cause packets to be doubly retransmitted. In this most recent attack, the bogus UDP packets overwhelmed the real ones - but it was easy to solve once we finally determined what was going on because UDP packets should only be accepted from one source - the VPN network. Javapipe dropped all the other packets and the system returned to normal, since we don't provide any services that use UDP.
- It's time for a poll. Chris received a quote from Comcast Enterprise Solutions yesterday. They charge $1095 for a single DDoS response, which is good for 24 hours.
- One option is to keep doing what we're doing what we're doing now. I assume that attackers try the cheapest attack types first, so as Javapipe blocks them, the attacks will probably become too expensive to even attempt, let alone sustain for long periods. But when new attacks occur, it takes days to figure out what is happening, and it introduces another point of failure into the system when Javapipe is having trouble with their services. This method allows fees to be lower, but the system would be unreliable.
- The other option is to use Comcast, which has people who can be reached on the phone and who will respond within five minutes any time of the day or night. They guarantee uptime, so I doubt we would have problems with that, but the high cost means customers would have to pay extra fees, perhaps rising to 6.99%. We could make days there are no attacks "bonus days," so that miners get a surprise 2% bonus when we don't have to spend the $1095 to deal with attacks.
- Which option do you prefer?