
Originally Posted by
Jeeqbit
A DDoS is meant to be due to hacked machines with viruses being commanded to send malicious packets all at once. Thus, if they continued doing it regularly, the owners of those machines might notice. Most likely they don't want to permanently ban lots of IPs because they could be dynamic and result in lots of player bans, so it becomes trying to figure out which traffic is malicious as it happens.
I suspect most of the DDoS attacks are not even aimed at FFXIV. Most likely FFXIV gets caught in the crossfire from DDoS against other services hosted at the same data center or nearby locations, or in other cases major ISPs decide to throttle traffic causing packet loss for most FFXIV players due to most of them crossing through that ISP's wires.
The recent ones do seem more directly aimed at the data center as opposed to nearby ISPs, because it seems to be affecting everyone rather than just certain players on certain routes.
It is really a problem though. How can we do the new content, the deep dungeon, knowing all our progress might be lost? My entire party disconnected in the 71-100 range but fortunately one of them anticipated it and logged out and back in pre-emptively to avoid the attack, allowing them to get back in before the rest of our characters were properly logged out. My last run, I didn't notice any issues but 2 players died and they said they loaded in dead from their perspective, so it was obviously a DDoS that wiped us and shortly after the failed run I got disconnected too.
If I decide to do a raid, how do I know a DDoS won't disband our whole party while we're progressing it?
That was my strategy when only certain players were being affected by DDoS a year or so ago. I thought, let's route through Arizona instead of directly across the middle of America and usually it was better. Eventually, it felt like SE's own countermeasures started catching me because of the VPN IP itself being a datacenter IP, and disabling the VPN then stopped me disconnecting.