This is not a DDOS, Tell the truth SE.

Actually it seems like it's not even the game servers that are down, it's the damn Lobby itself ahah

Annnnnd there goes my PT run.

Quote:

---

Originally Posted by Appleboops

Actually it seems like it's not even the game servers that are down, it's the damn Lobby itself ahah

---

this is when I pick up a good book (was in PT)

C'mon......

There is actually a very good chance this is still related to the DDOS.

I play on US servers from overseas. Since the disconnects stopped I have been struggling with massive ping, 3000-12000 even in solo instances. It's not an issue on my end, I noticed with a ping tracker that the jump from my locale to the US is what causes massive drops. I suspect the attacks never stopped, they just put a dam infront of the problem and now either they found a way around and came back with a vengeance or they broke some other infrastructure. I do not use enough media from the US to be able to check but there definitely have been problems for weeks, even after the effects most of the US playerbase could feel stopped. Square ignored the issue and it came back to bite them. ... well. It bit us because they sadly do not give a crap.

Maybe they're just giving us a preview of what's to come this Thanksgiving weekend. Happy Thanksgiving!

Where's our free game time Square? We've had an entire year go by with this shit happening. I want free game time already.

I had some rare fish windows I wanted to use.

Oh well, guess I'll do something else.

Quote:

---

Originally Posted by Vrankyl

Don't think it's a DDoS this time around. All four NA Datacenters are just dead.

---

Shadow too, which an EU datacenter

Quote:

---

Originally Posted by SkankyRoe

Shadow too, which an EU datacenter

---

Shadow does not exist. EU only has two, chaos and light.

https://na.finalfantasyxiv.com/lodestone/worldstatus/

Honestly, fire and replace everyone in the NA division. You need competent people in those offices, not whatever drooling dipshits you have right now.

For those lurking, looks like the servers have been restarted. I would suggest not doing anything that might lose you progress or materials for the time being.

Quote:

---

Originally Posted by SkankyRoe

Shadow too, which an EU datacenter

---

Shadow isn't a real DC. It's a temporary DC that only gets enabled for, e.g., expansion launches, to reduce the load on the two real DCs. Characters can't be created on it; they can only visit.

That it's frequently been near exclusively NA datacenters being affected, it makes you wonder how little they actually care about that region of the playerbase.

Whatever's going on, it's become annoying enough to make me post here. It's happened enough throughout the expansion that two weeks added to our sub would be a nice gesture of good will at this point.

I worked in a datacenter NOC for 18 years. None of this looks like DDoS activity to me. FF14 has had HORRIBLE network problems ever since they moved the servers to NTT in Cali years back.

Quote:

---

Originally Posted by Krojack

I worked in a datacenter NOC for 18 years. None of this looks like DDoS activity to me. FF14 has had HORRIBLE network problems ever since they moved the servers to NTT in Cali years back.

---

What would you say it the biggest indicator that it is not a DDoS and instead something to do with shoddy networking/servers?

Quote:

---

Originally Posted by hydralus

What would you say it the biggest indicator that it is not a DDoS and instead something to do with shoddy networking/servers?

---

I'd like to know this as well. The thread has completely veered off topic into discussion about DDoS mitigation and how squenix should be compensating us when the original claim is that they are covering up whatever the real issue is by claiming it was DDoS attacks. There's already rampant misunderstanding about the nature of DDoS attacks going on here and while I'm as frustrated as anyone I really do not see how this is helping. Unless someone can provide some solid evidence/numbers/what have you indicating some other source for the issue it is just actively ruining our credibility to be playing conspiracy theorist about this issue, as if squenix needed an excuse to not take us seriously anyways... The company cutting corners when it comes to mitigating attacks and failing to communicate to customers is a bad look already. I fail to see how that would be a good cover story for busted hardware or whatever the current theory is.

The game is still being DDOS'd?

Quote:

---

Originally Posted by SkankyRoe

Shadow too, which an EU datacenter

---

That was just a datacenter meant to mitigate the congestion during Dawntrail where you were only allowed to datacenter travel.

Quote:

---

Originally Posted by EchoingPulse

The game is still being DDOS'd?

---

There was a confirmed* (by squenix) DDoS wave as recently as last week. Yesterday there was an NA outage that they reported as a network failure, not DDoS; It is still a pretty bad indication of the state of the servers if NA players assume it was yet another DDoS though.

If I'm not getting 90k'd, I'm getting over 10 second delays over basic actions like gathering.

Quote:

---

Originally Posted by Xieldras

If I'm not getting 90k'd, I'm getting over 10 second delays over basic actions like gathering.

---

Same here. I got d/c twice in the last hour and had HUGE lag spikes earlier.

I know this thread is a little old but instead of starting a new one, as someone that rarely goes to the forums, I just want to say that for weeks the NA servers have been getting ddos attacks. I’ve lost crafting supplies that took time and tomestones to get. We disconnect in almost every roulette. I don’t know what the Japanese servers are like, but I find it hard to imagine that if this was happening in Japan all **** wouldn’t hit the fan.

We do have a new update today regarding recent ddos attacks, so at least they are now aware of the situation.

In absence of an official statement (not the canned server issues copypasta from the Lodestone), it's hard to take their word that this is DDOS in good faith.

This isn't a celebrity scandal. Ignoring it won't make it go away. The longer there's no word, the more wildly the community will speculate.

I hate to assume that they're not being honest, but it feels like they resolved the overload in Endwalker by leasing cloud servers, and then when player counts decreased, they just decided not to sign a new agreement. I get that it's a business, and there are always going to be some things that they can't anticipate (DDOSes etc.), but if they want people to drop money on the 8.0 preorders and want people to resub, they might need to just bite the bullet and take an up front cost if cloud servers is what they need. People are unlikely to resub or recommend the game to their friends if everything on their socials is about how people are losing expensive crafting mats and high end raiding progress because they get sundered every couple hours.

Releasing a new cash shop glamour before addressing the issue makes them come across as callous.

Quote:

---

Originally Posted by TeresaFortell

We do have a new update today regarding recent ddos attacks, so at least they are now aware of the situation.

---

No, that was a followup. They updated us when the attacks started, then updated us just now to say that the final attack ended on christmas day.

Until the next ones, of course, which will either be in days, weeks or months.

If it's not a DDoS situation, it (at least short/medium-term) is over.

It would represent a complete catastrophic failure of the system on a hardware level and they're refusing to tell the truth about it -- if that's the case.

If you don't believe this is either a DDoS or a routing issue with the likes of NTT, unsub. Seriously. Because the game won't be around much longer if the physical hardware is dying on the North American side to that extent.

Ugh we really shouldn’t even have to be guessing, the devs should be transparent and saying what is wrong & how it’s getting fixed. The only reliable things I expect at this point are seeing new cash shop items in mogstation and disconnecting eventually from NA servers because they won’t even talk about the problem

Quote:

---

Originally Posted by Basteala

Honestly, fire and replace everyone in the NA division. You need competent people in those offices, not whatever drooling dipshits you have right now.

---

The problem is that you'd have to do that across the board, because you could say that about just about everyone, top to bottom.

Funny thing WoW got hit with DDoS attacks constantly a few months ago and the forums were exactly like this.

Has it been fixed? TBH we’ve been having the ddos problems for a long time. I remember disconnecting during prog & reclears on the first and second raid tier too.

Quote:

---

Originally Posted by hydralus

Funny thing WoW got hit with DDoS attacks constantly a few months ago and the forums were exactly like this.

---

DDoS has been going for a while and has been more of an issue since DT launched it does seemed to have been endured for a longtime by the community with not much of a response via an update. Though I may have missed it tbf.

Quote:

---

Originally Posted by hydralus

Funny thing WoW got hit with DDoS attacks constantly a few months ago and the forums were exactly like this.

---

Those were a bit more targeted. They only hit the Hardcore Classic servers and it was done intentionally to mess with a specific guild on those servers. The perpetrators did succeed in making the guild break up, at least initially but then Blizzard came in after they added additional protections by allowing hardcore characters that died to be brought back. Which is why people were so upset there. It was a short time, but it cause characters to essentially be permanently lost. Meanwhile, there was a day of DDoS on the WoW servers recently, they restarted the servers and all was good again. The last time there was anything of this length aimed at WoW was the LizardSquad.

I wouldn't be surprised if it's really not ddos at all, but rather that % of the playerbase that's botting their f'n minds out 24/7. Endless stacks of 99 on the market board. RPer's standing around for hours like mannequins showing off their "not glamours". The game has never had such stability issues over this a long period of time. Yoshi-P's comment about it potentially being caused by over use or retainer access could've been a subtle hint at this. And if this was the case it's not like the modders running rampant would ever get close to assuming culpability. In all reality players using such mod systems could be "ddos"-ing themselves without even realizing it. Does anybody really know, or even care about what's going on under the hood? Probably not.

Of course, I have no evidence to prove such a claim, it's just my bias-confirming speculation.

A fix for that could be to just stop allowing us to multibox on one account. Might ruin the fun for players like Weeb Police and some bard bands, but it's an experiment worth pursuing.

SE's servers haven't been going down. Apparently if you use a VPN you can stay connected while everyone else DCs, the server is up the whole time. I've always been able to log right back in, if the server was being DDoSed it would go down and be unavailable for more than a minute. It's some node or something outside of SE's control between you and the server, and even that's not going 'down' it just has the hiccups.

Probably a bunch of AI datacenters sending traffic though that same node, and it can't quite handle the increased load.

Quote:

---

Originally Posted by Fawkes

Probably a bunch of AI datacenters sending traffic though that same node, and it can't quite handle the increased load.

---

That's certainly not an outlandish conclusion

Quote:

---

Originally Posted by Fawkes

Probably a bunch of AI datacenters sending traffic though that same node, and it can't quite handle the increased load.

---

Thing is, I contacted NTT and they didn't mention anything about issues at those nodes, and you would think that they would if asked about them and shown a full network trace to the server. They kept their focus to my query about DDoS and that they have DDoS mitigation services that can be purchased and seemed confident they were actually good. Upon investigation, I saw they had several tiers of DDoS mitigation services, depending on how deep you need to customize the countermeasures.

I've been thinking about it though. If someone sends you TCP ping packets, what can you do? If you rate-limit them to stop the DDoS, you potentially block out players' ping packets.

A lot of games use UDP, which involves having their own customized packet structure including for ping, so they would be more easily able to filter out packets that don't resemble the games' or that don't match the IP/connection ID combo.

So my guess is using TCP just makes it all the more harder to distinguish DDoS traffic from game traffic, making countermeasures a lot harder.

All of which means changes to the server itself could improve the ability for countermeasures to actually be effective. But it would really surprise me if SE ever put in effort like that.

We've literally tracked the issue in real-time, the NTT node is getting attacked, not SE servers. People routed through other connections not getting kicked is consistent with a DDoS.