[EXTENSION] Query Cache 1.7 (Updated!)
 

This is merely an updated version of recon0's Query Cache. The convars have been removed, and after installation, the only time you will need to update or maintain this extension is if the protocol changes, or if the extension is updated.

Purpose: Protect the server from A2S_INFO DoS attacks. Every 5 seconds, the data in the A2S_INFO is refreshed to reflect the current values.

Changes from recon0's extension:

• Added a Linux binary
• Now allows players to connect to the server (the "null entity packet" protection recon0's extension provided prevented any user from connecting to the server)
• Extra data flag is now reported

Todo:

• Report the actual tags. Currently the tags reported is "Tags, tags, MORE TAGS"
• Fix the password bug on Windows

Credits:

• recon0 - Wrote extension code
• Afronanny (me) - updating and maintaining it
• asherkin - Provided the code to get the gameserver's steamid

Download available here: http://code.google.com/p/querycache/downloads/list
Source Code available here: http://code.google.com/p/querycache/source/browse/

Note: If you want to compile this extension yourself, have Open Steamworks available.

If you encounter any problems please post them here.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Thanks for fixing the issues!

*Edit: Still locks CS:S servers when loaded*

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

What OS?

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Uhh Windows, server edition 03 iirc, although possibly 08.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

1)
seams like linux version file name should be querycache.ext.so not query_cache.ext.so
2) extension don't respect sv_visiblemaxplayers and shows all slots
3) Game Description is static, pls make it work with SDKHooks GameDescription hook

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

1. Oh blah. Smack me for doing this late at night. fixed now
2. Will do
3. I'll add something that works with SDKHooks.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

This may have issues on some windows servers, due to the Steam library doing batshit-insane load-order stuff.

Afronanny, grab me on IRC one day and I'll give you what you need to make sure it can't fail.
Also, as your using OSW already, there may be a better way to hook the packets, I can talk to you about that at the same time :).

Anyway, Nice job continuing work on this.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

I assume you're talking about this when talking about fixing Windows loading issues, no?

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

That's the stuff, but a reentrant function can do a much cleaner job of it.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Which way does it better, yours or Wazz's?

Thanks, but valve is going to hate my guts for doing it. You know why.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

If your talking about the stuff in the code labeled Wazz Method, you have to go through each stage until it works, the last one is just called "Wazz Method" because it's the only way that would work on his machine.

EDIT: Here is VoiDeD's code that he uses: http://voided.pastebin.com/eCmw0kA1

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Hello, we have been getting attacked for the past 2 days.

Do you know of any kind of fix for the following:

They all appear to be spoofed ips, They are causing a massive amount of lag.

Packet: Looks like Source Query
ffffffff54536f7572636520456e67696e65205175657 27900

If you know a fix let me know! Thank you!

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

This seems to be another packet they are using to attack us with: I dont know what this on is.
ffffffff71303030303030303030303030303000

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

There are two problems you have to deal with when it comes to this specific attack, the first is the denial of service caused by sending over 60 OOB packets per second. When that point is reached the engine will stop sending ANY OOB packets (including connect challenges) during that window. That's the first DoS which this plugin prevents.

The second problem is compounded by the fix for the first problem, which is that it replies to every A2S_INFO query. This floods the network and causes an increase in CPU usage and takes up network bandwidth (backscatter).

The solution would be a rather simple QoS system, giving game packets priority over OOB packets. This would give the least amount of impact to the players in game, and since OOB packets don't need to be recieved right away they can take a much lower priority.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

60 pps is low. I have blocked 99% of the attack all the way down to 325 pps. Its barely touches my bandwidth at all yet it lags the entire server so bad I cant connect. The plugin doesn't appear to help at all shows it as running in meta list and everything.... I just dont notice any difference. We are still unable to connect to the server.

I dont know what you mean by QoS System, OOB packets.... Or how I would set this up.

Thanks for the help, I appreciate it.

By the way I'm using Windows.
- version appears on server browser as locked but its not locked. Users can still join as well.\
You can connect through console but if you connect off the browser it asks for a password.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Any OOB packet will count against the window limit, this particular plugin only covers A2S_INFO, it looks like you're being spammed with connect challenges as well.

You don't, it's up to someone with effort to implement it.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Try this. It now has a timer to block these if there are more than 5 in 5 seconds. Source code is available here

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Any luck on fixing the dirty hidden password for Windows?

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

If we could just get the password removed on the browser so users dont have to connect through console we would be set.

I have also been able to patch mine by my secureport firewall. Limiting that packet per second.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

I honestly don't know why a password is being reported. Perhaps valve changed CBaseServer::GetPassword to report an empty string rather than just NULL. I'll test it out and see.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

ff ff ff ff 71 30 30 30 30 30 30 30 30 30 30 30 30 30 30 00

Still seems to lag us to death even with the plugin you made. Any other ideas/thoughts? All spoofed ips.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

[03] <FAILED> file "querycache.ext.dll": The specified module could not be found.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Got it to load but had the same password glitch others have had.

Also something causes it to eat up all the sql connections and flood my remote server. I now got to run mysqladmin flush-hosts to hopefully fix it.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Your machine is Linux right zero? That would make it confirmed on both Windows & Linux :-o.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

I did in face test this on Linux, it's fine on Linux.

I'm thinking CBaseServer::GetPassword no longer returns null when there's no password on windows. should be a trivial fix.
I'm on vacation in New Jersey right now :crab: :crab:
I'll look at it when I get back, since I have literally nothing to work with (apparently my ip changed yesterday, so I can't ssh into my machine to do any development because I don't know the new IP. time to write some daemon that will send it to me via text message if i email it?)

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

No this was on windows, even if the password issue was fixed it still flooded the remote sql server locking the connection out so that it would no longer work, thus killing ZR.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Not sure I understand. This extension is flooding your SQL server locking it up?

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

I tried to install this after that sm_hide_slots 1 had a bug and i cant make slots hidden.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

I can't seem to compile this for the life of me. I've moved most of it to the latest MM:S branch, fixed the paths, etc. However, I get this when compiling with gcc 4.2.4 (Debian 4.2.4-6) on my Arch Linux Machine (gcc4.3+ renders the same kind of error): PasteBin.

The line that it points to is #include <iostream>, which makes absolutely no sense. The same thing happens when I try compiling with llmv.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Try 4.1

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Can someone attempt to fix the password issue, i would try but i have no idea how to compile an extension. Thank you.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Any chance at getting this fixed so it compiles properly?

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

yea i have the same issue with "http://forums.alliedmods.net/showthread.php?t=114787" but with the newer version i get this error when i type "sm exts list" and the extension doesnt load.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Here is a fixed version of this plugin. Source not changed but it worked for me upon recompiling. Can anyone test and make sure that it works? If not i think i have a fix that will work.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Unsure if it works, but I do have it installed and running on two of my dust2 CS:S server.

Thanks ... :)

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

It should defiantly block all AS2_INFO spam. This should fix the password bug, which shows that there is a password when there isn't. If your servers aren't showing that when u try to connect then it works fine :)

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

What did you change to make it work?

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

I didn't change anything, i just recompiled it. Could be something was outdated? because i'm using the latest version of everything to compile it.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

Afronanny derps again. I updated the source but never compiled it.

Re: [EXTENSION] Query Cache 1.7 (Updated!)
 

lol, at least it works now and thank you for making such a useful extension.