Server Statistics for the month of April 2003

**uRmad** · 02-05-2003, 10:44 AM

Quote:

doesn't this make the pg forum kind of vulnerable to dos attacks

boy.....so we sure do know where to start tracing back in case pg.com is DOSed one fine day.....

...and all u guys also know whom to point the first finger at

......btw, s_t.....u guys out there ever tried ur hand at that....i hear u got plenty of spare b/w.....anyone's tried their hand at that???

Cheers

Silken_Touch · 02-05-2003, 11:22 AM

hey, I am not doing anything. And why should I do anything to my beloved forum?
if anything happens, you should thank me for warning you early.

**pagalguy** · 02-05-2003, 01:02 PM

Hey Subbu,

Quote:

Originally Posted by uRmad

a lotta guests must be directly downloading those stuff.....hey ppl...whatsay on removing those links from there....and making downloads accessible only from the forums....in effect only for registered users....... just a thought..... nothing more into it...whatsay folks....

Everything is logged

Even those downloads through the threads are logged. But it is not tabulated along with the download logs in the download section. So in effect, everything is logged and calculated.

Shubh :

Quote:

But if you wanna see how our forum looked back then, I have got it
May be I will use it as an exhibit in the function to commemorate 100,000 users of PG.com or listing of pg.com on bse

Tell me you ripped the entire structure including the index page ?

1,00,000 users.. ain't that the entire CAT Junta.. I'd love that.. why give CAT.. go PG

LOL

PG.com ain't gonna make no money as I see it as of yet... and I still think BSE needs profitable companies on its listings

!

S_T,

Quote:

doesn't this make the pg forum kind of vulnerable to dos attacks?
PG have you taken good precautions?

My servers have been under attack quite often in Feb and March. No necessarily PG.com. But most of it was resolved. We had synchronous flooding and DDoSing. DoS and their likes are a part and parcel of my daily life.. drats !

However in the last months, the DC has been upgraded and almost all DoS attacks and filtered and firewalled and nullvoided with a matter of seconds.

However PG.com is severely stress testing my server as it shares it with other clients.. so I may move it in a month or two to a different rock solid data center in Ohio, which has a OC-48 backbone connectivity and is the best DoS handler in the world

**uRmad** · 02-05-2003, 01:16 PM

okie..... so its sound stuff on a sound secure server

.....yeah.....such attacks make up most of a data hosting firm's daily job, i guess

.....

Quote:

Originally Posted by pagalguy

However PG.com is severely stress testing my server as it shares it with other clients.. so I may move it in a month or two to a different rock solid data center in Ohio, which has a OC-48 backbone connectivity and is the best DoS handler in the world

yep...i too was wondering if u didn't have any problems on that front........coz the number of pages served seem to be going only one way...up...

......OC-48...boy...so what are you guys on now....???

Cheers

**pagalguy** · 02-05-2003, 01:56 PM

Hey Subbu,

Quote:

okie..... so its sound stuff on a sound secure server

.....yeah.....such attacks make up most of a data hosting firm's daily job, i guess

.....

Very bery much ! It gets irritating as it is definitely on your nerves after a while. Plus such bandwidth charges have to be borne by us. Trust me, it racks up with such speed.. it at times can be enough to run firms outta business !

Quote:

yep...i too was wondering if u didn't have any problems on that front........coz the number of pages served seem to be going only one way...up...

......OC-48...boy...so what are you guys on now....???

Currently we are on :

http://www.neutralweb.com/html/network.html

Direct GiG-E circuits with 100Mbps LAN connects using CISCO and Foundry Network equipments. The current DC is heavily multi homed in terms of Bandwidth and definitely can handle more than a few OC-48s

However for proper DoS management, we need the data to flow in mainly through a single line and then have a backup line for data to filter in. That is the beauty of the DC in Ohio, which uses high single high speed QWEST line to handle the traffic and are in installation of a Time Warner Fiber for redundancy.

I spend a lot of time choosing the best networks.. they are expensive, but they also allow me to catch those 4 hours a night of sleep

!

**uRmad** · 02-05-2003, 03:50 PM

Quote:

it at times can be enough to run firms outta business !

u bet.....etoys almost wound up, remember....

......yahoo, amazon, who hasn't lost business because of these.....but know what, although ppl have been able to come up with some or the other techie soln to blocking those IPs n the like, what is reall funny is the slashdot effect....i am yet to c any website that has effectively managed to overcome it

.......

Quote:

However for proper DoS management, we need the data to flow in mainly through a single line and then have a backup line for data to filter in.

i am a bit rusty on those areas nowadays....any links to support that.....my understanding was that multi-homed architectures were a lot better as then, each had to be taken down individually......by having a single pipeline, ain't it akin to installing a single but real huge gate ??......i agree it will be real tough to fill up OC-48s and the like,,,,but still.....the crackers are improving a lot by the day......but as i said, i am very rusty....correct me if i am wrong there.....

Cheers

**pagalguy** · 02-05-2003, 04:26 PM

Hello Again Mate,

Quote:

although ppl have been able to come up with some or the other techie soln to blocking those IPs n the like, what is reall funny is the slashdot effect....i am yet to c any website that has effectively managed to overcome it

.......

There are too many variants, ICMP, ping etc and their likes. True there is no single way of handling such issues. But larger attacks are mainly on large sites. Most of the Datacenters had a tough time handling Arab related sites as many of them were attacked during the last 2/3 months.

As for the /. effect.. that is one thing I'd like to experience some day myself

Quote:

i am a bit rusty on those areas nowadays....any links to support that.....my understanding was that multi-homed architectures were a lot better as then, each had to be taken down individually......by having a single pipeline, ain't it akin to installing a single but real huge gate ??......i agree it will be real tough to fill up OC-48s and the like,,,,but still.....the crackers are improving a lot by the day......but as i said, i am very rusty....correct me if i am wrong there.....

Ah the merits of scale !

You are right about multi homed architecture. But its scope is different in various aspects and dimensions of network reliability and site uptimes. Multi homed architecture affords you the peace of mind as your site 'may' still be reachable. But it also causes the trouble of isolating the attacks.

In case of a multi homed architecture, filtering cannot be applied to all the fibers. That will slow the network down to a crawl if a firewall is set @ all entry points. Also the attack tends to get re-routed to different fibers and stopping it becomes a nightmare as the BGP tables route all the data through the fastest router. This itself will help in flooding the website. Yes, the website survives, but makes it much more tougher to stop the entire attack.

The OC48 network is internally firewalled. That is the beauty of the setup. The attack is not allowed to continue without high amounts of monitoring. Yes, redundancy does take a back seat at times. But again, the offenders are null voided immediately as there are not many places of access to look at.

Also it becomes easier to slow down traffic by blocking ICMP, PING on the entire network immediately. Plus, it is easy to re-route certain servers through the backup network. Therefore even if the ENTIRE DC is under attack, certain servers on certain IP ranges can be re-routed through backup lines.

Err.. too much techie talk

PS : Multi Homed is Good.
PPS : OC48 pipe is useful in null voiding the attack the fastest

**uRmad** · 02-05-2003, 04:36 PM

thanks a lot for that pal......yeah...i too was thinking on similar lines....but wanted to confirm it from someone who's involved with these day in and day out........

..yeah...u cud probably survive a very bad attack on the oc-48.......and the multi-homed.....well...complexity comes at a cost

........anyways..thanks again... time to get back to some books

Quote:

As for the /. effect.. that is one thing I'd like to experience some day myself

u bet.......i'd luv to c a damn good thread on pg that we cud take up there...... tuf but surely not impossible

Cheers

**uRmad** · 03-05-2003, 12:15 AM

hey...just noticed this....alexa shows up the site on their search...... added around 10 pages to its index......so we have folks on the forum that use alexa and share the info too

...... the traffic trends there sure sound ,well , interesting..

Cheers

**pagalguy** · 03-05-2003, 12:45 AM

What do ya know.. I too checked out Alexa today and was surprised to find that we are listed over there. But those view figures.. I couldn't make much sense of them..

How about dissecting it for us