Every time I try to access this community, ther’s some kind of problem with the server. If you have a look at the status page, it’s almost all orange/red. The problem aren’t DDoS attack since the server is behind Cloudflare protection. Admin/mods, why don’t you move this community to a different server instance? I’m not accusing anybody, I know that maintain a server can be a challenging sometimes, I just want to enjoy this community!

Please!

@Loki

  • static09@lemmy.world
    link
    fedilink
    English
    arrow-up
    25
    arrow-down
    3
    ·
    2 years ago

    ADMIN, isn’t it time to move from lemmy.world?

    They said, from their lemmy.world account.

    • peregus@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      5
      ·
      2 years ago

      What’s wrong with that? I’ve started here some months ago and I mainly follow this community.

      • dditty@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        2 years ago

        Cloudflare DDos protection isn’t a silver bullet; the attacks are distributed and come from shifting source IPs, and are sophisticated in that they exploit resource intensive queries specifically designed to overload a Lemmy instance. If lemmy.world were to pivot to some other instance, who’s to say the culprits wouldn’t just resume their efforts pointed at the new location? There are theories these may be carried out by the recently-defederated fringe hate communities

      • Pankkake@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 years ago

        From what I understand, Cloudflare can block some DDoS attacks, but not all of them.

        The attacks on Lemmy have to do with poorly optimized SQL requests; these are requests that shouldn’t take long to execute, but do due to some oversight. By spamming these requests, the attackers can bring Lemmy on it’s knees.

        Actually, wouldn’t this attack better be categorized as a DoS attack ? What’s so distributed about it ?

      • habitualTartare@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 years ago

        Cloudflare has DDoS protection but it can’t stop everything 100% of the time. According to the admins, the attackers are very familiar with how lemmy works and are using this knowledge to overwhelm resources. This isn’t just a simple script kiddy or bonnet for hire but likely points to someone that has worked within the lemmy community.

        https://www.cloudflare.com/learning/ddos/what-is-a-ddos-attack/

        https://www.cloudflare.com/learning/ddos/glossary/web-application-firewall-waf/

  • krayj@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    2 years ago

    By claiming that the problem isn’t DDOS, you’re just advertising your ignorance. Cloudflair is outstanding for protecting static web content against DDOS, and Lemmy.world is well protected against that. The problem is certain dynamic pages and api calls that can only be rendered from costly realtime dynamic database operations…those are the url that the DDOS attackers are focusing on and those are the kinds of content that cannot be easily protected by cloudflair.

    Your premise, though, is still accidently correct. The way to mitigate instances being targeted by DDOS is to spread the user base and community hosting across a vast number of instances so that no one instance is such a rewarding target for DDOS attack.

    • peregus@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      You’re right about my ignorance about Lemmy, I’m a user on this federated …thing and I know nothing ahout the Lemmy server. Being in a selfhosted community your answer is what I was expecting (maybe with less attack). The API are used only by the federated instance or also by the smartphone apps? For what I see, it seems to be the former, and, if it really is so, the API calls could be allowed only by those server and blocked from everyone else, Cloidflare WAF can do this. I know that the servers are a lot, but it could be possible to insert in the WAF all the IPs of the federated instances. …or not?

  • Maharashtra@lemmy.world
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    7
    ·
    edit-2
    2 years ago

    I find this comment section a prime example of dickish hivemind seething over nothing.

    There’s a dude, obviously quite fresh in the ways of Mastodon. He probably doesn’t realize all the nuts & bolts supporting the system and how it all works. He is asking a question that is logical, but it needs clarification, like “it doesn’t work like this, my man”.

    Instead he gets “Hsssssssssssssss, selfhost it, hsssssssssssssssssssss, interloper, hsssssssssssssssssss, you want to destroy this place, hssssssssssssssss…”

    Get a life, eejits.

    • krayj@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 years ago

      They are making an assertion as if it is a statement of fact…and they are, in fact, wrong. That’s ignorant and not helpful for discussion or helpful for understanfing and solving the actual issue. If they had actually asked an innocent question it would be different, but they didn’t. That is why the responses are the way they are.

      • Maharashtra@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        2 years ago

        No. The responses are the way they are, because people who gave them are already thinking they joined some elitistic “muh sikret klub!” group.

        Simple “eh, it won’t fix the problem, and here’s why and how YOU can help” would be preferable, but no, special elite force of lemmy underground is too privileged to bother.

        Thank heavens not everyone is like that. Saves the number of times I have to hit “block the idiot” button.

    • peregus@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      2 years ago

      Thanks! As you, I thought that this was a community to share thought and knowledge. In fact a couple of guys here pointed out that I could solve my problem accessing this community in another instance, not in the better way, but at least that was helpful!

      • Maharashtra@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        3
        ·
        edit-2
        2 years ago

        Yeah. It’s good that there are users who actually take time to explain some stuff, rather than just hissssssss like rabid vipers merely because somebody - oh no, what a preposterous idea! - asked a harmless question.

    • krayj@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      No, not programmatically. The only way to ‘move’ an instance is for a community of users to create a new community elsewhere and arbitrarily start using it as their preferred community. There is no way to force it and there is no mechanic for moving.