-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi I just wanted to know from others how often your nodes are being DDoSed? Because this month one of our nodes has been targeted twice. Because DDoS sucks and most providers aren't very happen when this happens often. Greetings virii - enn.lu -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iF4EAREIAAYFAlPfgjcACgkQzowS8yos8Rt1LQD/Rj2zZJpdmCyQhCmG3enWL6Z5 J0tbnnG2FS1GelACY74BAKIYRK8EVUt/pYfuuRzlBWWI84kuzcOmOiehqm6iyVjS =/ay4 -----END PGP SIGNATURE-----
Hello, With my 2 servers at Digicube it's pretty often (every month ?) The ISP's protection system is often disconnecting the server for the network because of this. Sometimes it's just false detection (or packets sended by a Tor user), invisible on bandwidth graphs but causing the network going offline. So it's disconnected serveral times per month (each time it happens, I send them an email and the server is reconnected). Because I'm not annoying at all with them, they aren't annoying with me. The user interface that provides a way to change reverse DNS doesn't work anymore for my second server (digi00666.digicube.fr - 2x 15MB/s), it have much more DDoS problems that the other one (with customised reverse DNS - 2x 12.5MB/s). Once, at Online.net, a DDoS attack (high amount of packet incoming) made my server send back a lot of answers. It was banned several days for sending flood! But as Tor Relay Operators we are strong and combatives ;) ----- Mail original ----- De: "Tyler Durden" <virii@enn.lu> À: tor-relays@lists.torproject.org Envoyé: Lundi 4 Août 2014 14:53:12 Objet: [tor-relays] Exit Nodes under DDoS attacks -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi I just wanted to know from others how often your nodes are being DDoSed? Because this month one of our nodes has been targeted twice. Because DDoS sucks and most providers aren't very happen when this happens often. Greetings virii - enn.lu -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iF4EAREIAAYFAlPfgjcACgkQzowS8yos8Rt1LQD/Rj2zZJpdmCyQhCmG3enWL6Z5 J0tbnnG2FS1GelACY74BAKIYRK8EVUt/pYfuuRzlBWWI84kuzcOmOiehqm6iyVjS =/ay4 -----END PGP SIGNATURE----- _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
On Mon, 04 Aug 2014 14:53:12 +0200, Tyler Durden <virii@enn.lu> wrote:
Hi
Hello,
I just wanted to know from others how often your nodes are being DDoSed? Because this month one of our nodes has been targeted twice.
Speaking of Nos oignons [0], since we have our nodes (3 IPs) (in October, or November 2013 iirc) we had a DDoS only once (at least of what we know). [0] : https://nos-oignons.net/ Cheers, -- Vigdis
On Mon, Aug 4, 2014 at 2:53 PM, Tyler Durden <virii@enn.lu> wrote:
I just wanted to know from others how often your nodes are being DDoSed? Because this month one of our nodes has been targeted twice.
What kind of figures are you talking about here, and how did you detect it? What kind of traffic?
My ISP detected it. They didn't specify which kind of traffic. I guess that it was a SYN-DDoS On 2014-08-04 19:04, Anders Andersson wrote:
On Mon, Aug 4, 2014 at 2:53 PM, Tyler Durden <virii@enn.lu> wrote:
I just wanted to know from others how often your nodes are being DDoSed? Because this month one of our nodes has been targeted twice. What kind of figures are you talking about here, and how did you detect it? What kind of traffic?
tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Tyler Durden schreef op 04/08/14 19:10:
My ISP detected it. They didn't specify which kind of traffic. I guess that it was a SYN-DDoS
On 2014-08-04 19:04, Anders Andersson wrote:
On Mon, Aug 4, 2014 at 2:53 PM, Tyler Durden <virii@enn.lu> wrote:
I just wanted to know from others how often your nodes are being DDoSed? Because this month one of our nodes has been targeted twice. What kind of figures are you talking about here, and how did you detect it? What kind of traffic?
I've seen several big ddoses on my exit nodes. They're generally UDP spams, focusing on saturating the network link, often 1Gbps+. They usually don't last long (10 min max), but I see them once every few weeks. Tom
Since I started operating the Torland1/Torland2 nodes in 2011 I noticed less than 20 DDOS attacks that lasted usually only a couple of minutes. I was never contacted by my provider. regards, torland On Monday 04 August 2014 14:53:12 Tyler Durden wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Hi
I just wanted to know from others how often your nodes are being DDoSed? Because this month one of our nodes has been targeted twice.
Because DDoS sucks and most providers aren't very happen when this happens often.
participants (6)
-
Anders Andersson -
Julien ROBIN -
Tom van der Woerdt -
tor-admin -
Tyler Durden -
Vigdis