Servers Just Got Nuked

[Alice_Rivers]

I really can't see it being too hard to separate connections requesting log-in from those already on worlds, they should only have to add a server handoff into that process and then have the firewall drop any direct connection attempts. That way at worst an attacker would be able to overwhelm the log-in side and people already playing the game would never know.

[DiaDeem]

[Jeeqbit]

Can we try and mitigate this somehow?

They go out of their way to do so. They are fighting it constantly and they contact ISPs to help them setup countermeasures, since the nearby nodes that don't even belong to SE are what usually get attacked (a dirty tactic by the attackers, because everyone blames SE for it when it's not even SE being attacked technically).

[DiaDeem]

[Alaguster]

1mil gil says Blizzard with their expan around the corner.

[Nikki]

1mil gil says Blizzard with their expan around the corner.

Blizzard stole my cat. Everything is blizzards fault

[Rayplicant]

1mil gil says Blizzard with their expan around the corner.

Blizzard stole my breast milk!

[Astronema]

Wuk Lamat has gained sentience and consumes all server resources now like sky net

[Ramiee]

I mean who is shocked. Everytime I have to go through the mogstation I remember that XIV has the worst technical aspects of any MMO.

[Ayan_Calvesse]

I really can't see it being too hard to separate connections requesting log-in from those already on worlds, they should only have to add a server handoff into that process and then have the firewall drop any direct connection attempts. That way at worst an attacker would be able to overwhelm the log-in side and people already playing the game would never know.

The problem is keep alive is a thing and it ultimately all comes through the same pipe - your connection is optimized in real-time so its not so much that once your in that your just handed off to the infrastructure; so these DDOS work more like a stroke vs a heart attack. interrupting that flow causing you to drop because you also lose the keepalive connection. Otherwise you'd double up the servers so that once you are handed off the node would need a 2nd ingress for every player. Its a good thought but the problem is these DDOS are likely not direct connect attempts and are from the looks of things interrupting traffic upstream; quite likely at a node outside of SE's control.