LemmyToday

322 readers

7 users here now

If you experience issues or problems with this instance (lemmy.today), this is the place to discuss them. Or if you just want to ask questions about how something works. Anything related to the instance or lemmy itself.

founded 2 years ago

MODERATORS

mrmanager@lemmy.today

Bots overloading old.lemmy.today (lemmy.today)

submitted 1 week ago* (last edited 5 days ago) by mrmanager@lemmy.today to c/lemmytoday@lemmy.today

60 comments fedilink hide all child comments

Hi,

We had a DDOS attack against old.lemmy.today which overloaded the entire server for about 20 minutes. I had to turn off old.lemmy.today temporarily and will look through logs and probably block more chinese ip ranges, since thats where it came from.

Always something to do. :) Keeping this as sticky for a while to inform everyone.

Edit: I added more ip blocks for Chinese networks and hopefully it will keep future bots away. Bringing up the old.lemmy.today user interface again...

Edit 2: Had to take it down again due to massive bot scraping. Currently down.

you are viewing a single comment's thread
view the rest of the comments

[–] mrmanager@lemmy.today 3 points 6 days ago (1 children)

Thank you, I was reading about pow protection and finding out more about it. Is there some local software you could recommend? I'm not too hot on cloudflare or other big tech services unless absolutely needed.

[–] db0@lemmy.dbzer0.com 3 points 6 days ago (1 children)

What is your reverse proxy software?

[–] mrmanager@lemmy.today 2 points 6 days ago (1 children)

Just nginx.

[–] db0@lemmy.dbzer0.com 3 points 6 days ago (2 children)

You can look into Anubis then.

[–] mrmanager@lemmy.today 2 points 5 days ago* (last edited 5 days ago) (1 children)

I added Anubis for https://old.lemmy.today/ and will see if it helps the situation. Bots are hammering it pretty hard but not getting any lemmy content at least. Thank you for your advice. :)

[–] db0@lemmy.dbzer0.com 0 points 5 days ago (1 children)

Glad to hear it. We use PoW to protect all endpoints which have a lot of load and cannot be cached anyway. The bots don't just hit old, they hit all of them.

[–] mrmanager@lemmy.today 1 points 5 days ago

Yeah, this is just a start. :)

[–] mrmanager@lemmy.today 2 points 6 days ago

Much appreciated sir. :)