CenturyLink/Qwest/Layer3 blocks Kiwi Farms

[Null]

There's an ongoing attack that I can't quite figure out. There's no issues with the MySQL or Redis as far as I can see. Backend and frontend are not bottlenecked on CPU, Io wait, memory, or bandwidth. The number of TCP sockets in use is normal for this amount of traffic and do not appear to be limited by any kernel security setting. The Webservers are configured to drop slow http attacks.

I've seen this before and I never figured it out. Cloudflare WAF did fix it but when I turned it off to try and see if we could handle it without it, I never got a working solution.

 

[DavidS877]

There's an ongoing attack that I can't quite figure out. There's no issues with the MySQL or Redis as far as I can see. Backend and frontend are not bottlenecked on CPU, Io wait, memory, or bandwidth. The number of TCP sockets in use is normal for this amount of traffic and do not appear to be limited by any kernel security setting. The Webservers are configured to drop slow http attacks.

I've seen this before and I never figured it out. Cloudflare WAF did fix it but when I turned it off to try and see if we could handle it without it, I never got a working solution.

As you've seen this is usually things like lack of sockets, lack of file descriptors, lack of ephemeral ports(net.ipv4.ip_local_port_range), too many sockets in TIME_WAIT(not enough ephemeral ports, or reduce net.ipv4.tcp_fin_timeout , or net.ipv4.tcp_tw_reuse = 1 if it's 0 or 2)

Obviously the usual debugging is tcpdump and strace, both of which are good fun on a busy server.

 

[endomorphosis]

I'm going to take partial credit, because I threatened century link with serious legal problems, and then they fixed the problem.

 

[(((Obar Lazcano Kamz)))]

I'm going to take partial credit, because I threatened century link with serious legal problems, and then they fixed the problem.

What was your threat?

 

[SenutiSolidus]

Trannies giving us a break on New Years Eve? Or perhaps it's too early for No Dong's gang to escape their disgusting pillows?

 

[Null]

Trannies giving us a break on New Years Eve? Or perhaps it's too early for No Dong's gang to escape their disgusting pillows?

No, I set up the webservers to eat the DDoS. They're still hitting it with thousands of connections a second.

 

[SenutiSolidus]

No, I set up the webservers to eat the DDoS. They're still hitting it with thousands of connections a second.

Badass.

 

[PyrrhicRustle]

No, I set up the webservers to eat the DDoS. They're still hitting it with thousands of connections a second.

Working much better this morning, thank you

 

[Prince Vegeta]

No, I set up the webservers to eat the DDoS. They're still hitting it with thousands of connections a second.

What a waste of troon money.

 

[Hepativore]

What a waste of troon money.

If troons cared about wasting money, they would have never gotten SRS in the first place.

 

[siegemeister675]

If troons cared about wasting money, they would have never gotten SRS in the first place.

Can you imagine taking out an small to average student loan or a nice car loan to get your dick cut off lmao

 

[Hepativore]

Can you imagine taking out an small to average student loan or a nice car loan to get your dick cut off lmao

Yes...and your SRS results will never look or function like real genitalia, anyway.

 

[artilleryfroth]

Can you imagine taking out an small to average student loan or a nice car loan to get your dick cut off lmao

Do they ever actually pay for it themselves though? I thought it was usually government money or a gofundme.

 

[siegemeister675]

Yes...and your SRS results will never look or function like real genitalia, anyway.

They can never, ever generate actual children no matter how "good" it "looks" or "feels" so they're technically sex toys, not actual "genitalia."

Do they ever actually pay for it themselves though? I thought it was usually government money or a gofundme.

If they're US citizens they certainly do.

 

[AnOminous]

If they're US citizens they certainly do.

No, they just move to one of the woke-ass states that pay for it like California or Oregon, don't have a job and go on Medicaid, and get it (and titty skittles for life) free.

 

[siegemeister675]

No, they just move to one of the woke-ass states that pay for it like California or Oregon, don't have a job and go on Medicaid, and get it (and titty skittles for life) free.

You can do this but you need to be BROKE to go on Medicaide, the limit is like 30K a year which is nothing. Most wagies make more than that and aren't eligible. Our welfare state in the US despite socialists running half our institutions is pretty meager (not complaining, pushes people to work harder, but having been almost homeless at one point it's shocking how poor you need to be to get help here, unless you're a thot with 6 kids by different baby daddies or a liar who can fake being disabled).

 

[artilleryfroth]

You can do this but you need to be BROKE to go on Medicaide, the limit is like 30K a year which is nothing. Most wagies make more than that and aren't eligible. Our welfare state in the US despite socialists running half our institutions is pretty meager (not complaining, pushes people to work harder, but having been almost homeless at one point it's shocking how poor you need to be to get help here, unless you're a thot with 6 kids by different baby daddies or a liar who can fake being disabled).

What if you are a NEET in your mother’s basement in California?

 

[Dyn]

What if you are a NEET in your mother’s basement in California?

Then you'll be on her insurance and better hope she's willing to front the copay.

 

[artilleryfroth]

Then you'll be on her insurance and better hope she's willing to front the copay.

And this is the situation I picture most of the troon that attack the site are in.

 

[siegemeister675]

What if you are a NEET in your mother’s basement in California?

Then you'll be on her insurance and better hope she's willing to front the copay.

Only if you're under 26.