NA data center DDos issues

[Hestzhyen]

From what i read it's hard to get around some of these DDOS attacks. My idea is why not only have a login server to the internet. Once you log in and your account it is verified then it checks your IP address which is not a hard process. Then it attaches you to the server after that and only allows your IP address that was verified. Wouldn't matter if your IP address ever changed because the login server would check your IP the next time you logged into it again. This way only the logging server could be effected by the DDOS attacks and if it takes a minute or two longer to Log in who cares as long as it doesn't effect the game. Login server could have QOS so DDOS attacks couldn't take all the bandwidth.

So uh, I don't want to be a jerk, but that's not how things work.

1) Range ban whole blocks, catching innocents, neutrals, and aggressors all in one go
2) Eventually have to range ban most of your incoming traffic because the nature of DDoS attacks means that the pool of addresses the devices are bombarding you from changes after certain intervals - attackers win gg no re
3) Individually approving "clean" addresses is costly, time-consuming, and would bog down the lobby servers worse than any external attacks could. If you though trying to log in on the day SB launched was bad... things like time taken to inspect and connect have a way of ballooning out of control once you're talking about the kinds of numbers that XIV deals with on a daily basis.

And for the record, it's not the log-in servers that are being attacked. From what I've seen it's not even a campaign directly targeted at SE. ISPs and back bone connections like Level3 have been bombarded, degrading service for ANYONE who's trying to use their connections. It really is out of SE's hands on this- all they can do is yell at the ISPs to route players around the troubled nodes, who historically don't give a hoot about service quality unless you're worth billions and can afford to bring lawsuits against them. Which they'll settle with no admission of wrong-doing and no promises to do better anyway. :P

Anecdotally, my connection was awful during prime-time last week but it seems to be doing better now. Still get rough spots during the popular times but it's improved a lot.