Raised This Month: $12 Target: $400
 3% 

Query flood


Post New Thread Reply   
 
Thread Tools Display Modes
Author Message
nixonkat
Member
Join Date: Nov 2016
Location: Turkey
Old 03-04-2018 , 12:15   Query flood
Reply With Quote #1

Hi!
On the forums (I took this from a older thread) I saw things regarding:
IP rate limit sustained 2571306 distributed packets at 85710.2 pps (14999 buckets).
IP rate limit under distributed packet load (6785 buckets, 9001 global count), rejecting 69.15.142.250:10250.
IP rate limit sustained 2037121 distributed packets at 67904.0 pps (6056 buckets).
IP rate limit under distributed packet load (6679 buckets, 9001 global count), rejecting 4.202.201.601288.
IP rate limit sustained 1667233 distributed packets at 55574.4 pps (6212 buckets).

Anyone saying "Any good host can protect against this"

Kind of... So ArborNetworks can't do much unless you order extended licenses. Great.
If you then were that guy who bought their extended license (which has a high cost to it) you'll find out it will filter real traffic aswell. So you'll have quite some false positives

How does it work with guys like OVH? They use pre-caching i know, but how?

Analyzing this in a pcap file (Which I can add here on request), it's not much bandwidth used, but alot of packets.

I was peaking at 500k packets per second.

Is there no way to fix this? Of course blocking the port works great. But then services will also be blocked.

I know how ddos works, and how protection works so please dont "You have no idea". However, there must be some rules etc to fix this. Many servers in the world has fixed it.

I read something about pre-caching which I found interesting, but I could't quite figure it out.

Please, if anyone knows anything, let me know!

Last edited by nixonkat; 03-04-2018 at 12:17.
nixonkat is offline
asdfxD
Veteran Member
Join Date: Apr 2011
Old 03-04-2018 , 12:34   Re: Query flood
Reply With Quote #2

cache: https://forums.alliedmods.net/showpo...6&postcount=32
ddos protection/kernel redirection: https://forums.alliedmods.net/showthread.php?t=297237

if u have linux.

Last edited by asdfxD; 03-04-2018 at 12:36.
asdfxD is offline
nixonkat
Member
Join Date: Nov 2016
Location: Turkey
Old 03-04-2018 , 12:53   Re: Query flood
Reply With Quote #3

Hi.
I do, however, even with my Linux knowledge im on deep water with those..
nixonkat is offline
Fluxxx
Junior Member
Join Date: Jan 2018
Old 03-04-2018 , 14:44   Re: Query flood
Reply With Quote #4

Quote:
Originally Posted by asdfxD View Post
That cache plugin does not work on linux ubuntu 16.04
Fluxxx is offline
asdfxD
Veteran Member
Join Date: Apr 2011
Old 03-04-2018 , 22:56   Re: Query flood
Reply With Quote #5

Quote:
Originally Posted by Fluxxx View Post
That cache plugin does not work on linux ubuntu 16.04
nah, it works.



i use custom kernel and xanmod kernel on other server, so try xanmod kernel.

Last edited by asdfxD; 03-04-2018 at 23:27.
asdfxD is offline
LaRoVV66
Senior Member
Join Date: Jul 2015
Old 03-05-2018 , 15:12   Re: Query flood
Reply With Quote #6

hi;

say me private i install your server firewall.
LaRoVV66 is offline
nixonkat
Member
Join Date: Nov 2016
Location: Turkey
Old 03-06-2018 , 02:58   Re: Query flood
Reply With Quote #7

Hi everyone!

The cache plugin etc, does it really fix "DDos"?

Like how c an it block the traffic? Is it set to block anything that isn't cached? Like I am unsure how it works. And if it really helps me
nixonkat is offline
nixonkat
Member
Join Date: Nov 2016
Location: Turkey
Old 03-06-2018 , 03:13   Re: Query flood
Reply With Quote #8

Also
[SM] Extension qcache_mm.so.ext.dll failed to load: error code 0000007e
L 03/06/2018 - 09:12:44: rcon from "103.57.75.17:52310": command "sm exts load qcache_mm.so"
nixonkat is offline
Squallkins
AlliedModders Donor
Join Date: Mar 2005
Old 03-06-2018 , 14:04   Re: Query flood
Reply With Quote #9

eh?

Quote:
Originally Posted by nixonkat View Post
Also
[SM] Extension qcache_mm.so.ext.dll failed to load: error code 0000007e
L 03/06/2018 - 09:12:44: rcon from "103.57.75.17:52310": command "sm exts load qcache_mm.so"
Squallkins is offline
nixonkat
Member
Join Date: Nov 2016
Location: Turkey
Old 09-15-2018 , 07:10   Re: Query flood
Reply With Quote #10

Hi!
This is still an ongoing issue:

I used this:
https://www.mail-archive.com/search?...2&o=newest&f=1

And it also works, I see this:
http://prntscr.com/kuopfw

However, I cannot join the server on port 29015... How come?
nixonkat is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 21:28.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode