Today, like the past few days, we have had some downtime. Apparently some script kids are enjoying themselves by targeting our server (and others). Sorry for the inconvenience.

Most of these ‘attacks’ are targeted at the database, but some are more ddos-like and can be mitigated by using a CDN. Some other Lemmy servers are using Cloudflare, so we know that works. Therefore we have chosen Cloudflare as CDN / DDOS protection platform for now. We will look into other options, but we needed something to be implemented asap.

For the other attacks, we are using them to investigate and implement measures like rate limiting etc.

  • PropaGandalf@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    3
    ·
    1 year ago

    Well for now we’ll have to stick around with cloudflare. I’d just would like to see something managed by a decentralized network. I don’t know if it exists, it’s more of a sentiment or a general idea.

    • johntash@eviltoast.org
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      You’re being down voted, but a p2p cdn is something that sort of already exists. IPFS is probably the most mature. As far as I know, it’d only work for static content though. It’s also an entirely different protocol so you’d have to use some sort of local gateway or plugin to make use of it.

      I have several vms and dedicated servers that I sort of use as a DIY cdn. No where near as spread out or capable as something like cloudflare, but its also not incredibly expensive to do on a small low performance scale. DDOS mitigation is another story though, generally that is best handled by large networks that can soak up the throughput.

      • PropaGandalf@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        arrow-down
        1
        ·
        1 year ago

        Yeah it’s also more of a potential that I wanted to point out. Over the years that I have been involved with blockchain projects, I have developed a feeling for where blockchains and decentralised networks are suitable and where they are not. In this case, however, it seems very feasible to me. In the end, CDNs are nothing more than a server network that caches the data locally and distributes the bandwidth. This is exactly what an independent network could do with the advantage of the blockchain to remunerate the contributions of the individual node operators. But I see that the notion of blockchain triggers a great aversion in most people.

        • deepdive@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          ·
          1 year ago

          I don’t have half the knowledge in IT you have, but i totally agree we should find a solution to seperate from mastadons who owns the whole network.

          It’s very similar to how we shouldn’t give big corpos like GAFAM willingly our data/privacy or our foodchain shouldn’t be controled by a few corpos who serve poison… (the list goes on).

          Most people just don’t care, they have nothing to hide or they won’t die if they eat one cheesburger from McDonald’s a week…

          But in the case of lemmy I think (personal opinion) It’s because it’s easier, simpler, faster to setup right now. I’m sure if they had a better solution to not depend on cloudflare they would chose the other solution.

          I mean your idea seems great, but how long would it take to put it inplace? How many highly qulified people are needed to make it work? How much will it cost…

          I hope that in the long run, lemmy instances are going to find a better solution 😀

          • PropaGandalf@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            arrow-down
            1
            ·
            1 year ago

            I’m only talking about the long run. For now cloudflare is a solid service. I’d love to see some experental approaches tho maybe from other smaller instances.

    • woelkchen@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      I think the biggest problem with such services is that they require lots of money to run which means that any well-meaning effort will eventually end up becoming a commercial service.

      • PropaGandalf@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        arrow-down
        2
        ·
        1 year ago

        …and that’s where the blockchain comes in. This means that the individual contributions of the node operators can be directly recorded and compensated adequately.

          • PropaGandalf@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            arrow-down
            3
            ·
            1 year ago

            Tell me a good argument why not? How would you reward those people that contribute to said netowork?

            • woelkchen@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              1 year ago

              Tell me a good argument why not?

              The downsides of blockchain / cryptocurrency are well documented at this point.

              • PropaGandalf@lemmy.world
                link
                fedilink
                English
                arrow-up
                0
                arrow-down
                2
                ·
                edit-2
                1 year ago

                Yeah sure like with centralized solutions and big corpos too. What kind of argument is that?

                • woelkchen@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  1 year ago

                  Yeah sure like with centralized solutions and big corpos too.

                  The alternative to big corporations is not blockchain.

                  What kind of argument is that?

                  A better than “…and that’s where the blockchain comes in.”

                  I’m not discussing with a crypto bro about the already well documented downsides. Use a web search engine of your choice to look them up yourself.

                  • PropaGandalf@lemmy.world
                    link
                    fedilink
                    English
                    arrow-up
                    0
                    arrow-down
                    1
                    ·
                    1 year ago

                    So you’re just an ignorant guy who only ever looks at his side of the argument. I’m not saying it’s the cure-all. Blockchain has many problems but much more potential. It’s not the technology’s fault that it’s being exploited for money-making and scams.

    • Beetschnapps@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      It’s an interesting question but the knee jerk reaction towards decentralization isn’t always a silver bullet. Bitcoin always screamed that concept while ignoring the role of clearinghouses. Decentralization can actually compound the issue. Not to dispel the solution but good to keep these things in mind.

      • PropaGandalf@lemmy.world
        link
        fedilink
        arrow-up
        0
        arrow-down
        2
        ·
        1 year ago

        It isn’t a silver bullet but in this case it is particularly suitable. I mean, the architecture of CDN is decentralised, but all these servers are controlled by ONE company. So why not leave the whole task to an independent network?