DDOS attack

[Valkyrie_Lenneth]

Got several disconnects (Primal/Lamia) 2 in the middle of a duty (fortunately it gave me the rewards). I knew something was up when I saw 30 in queue to start today. Then it was 138. AND even though I had stuff to do, things simply weren't working in the game, so I exited.

Thing that really pisses me off is the SE Server status say everything is working correctly. Bulls**t.

Because the servers themselves ARE working correctly.

[Darnath]

I think for today at this point they need to just go into early matience. Even if they get everything working now there's only like... Less then 6 hours until the servers are going down anyway. (Unless they need to be running to learn about the attack)

Agreed! Take advantage of the situation. Game's semi-unplayable as is. Might as well take it down and do the maintenance now since it is affecting most DCs anyways.

[Tulvi]

Thing that really pisses me off is the SE Server status say everything is working correctly. Bulls**t.

Server status page is not lying. It is there to inform only about whether the servers are online, which they are. That page is not there to say if it’s running correctly, only if it’s running.

[Sjol]

Agreed! Take advantage of the situation. Game's semi-unplayable as is. Might as well take it down and do the maintenance now since it is affecting most DCs anyways.

Except it's about 4am in Japan right now and they're probably not going to wake up the team just to take advantage of it. Right now, the DDOS is probably be handled by their third-shift or 24-hour support team.

[Jeeqbit]

It's a Distrubuted Denial of Service attack. Where lots of different machines attack at the same moment, so they can't just ban a single IP.

They have happened for years (like even SB I think at least), often at routes leading to the server affecting specific ISPs. But SE got good at contacting those ISPs and setting up countermeasures instead of blaming customers.

So DDoS attacks stopped being very effective anymore until this one.

[RiversideGuy]

Horsebleep, if a server is under attack it is NOT not online in the fashion it is designed to do. This should be reflected, not hidden from users. AND as a former server admin, I know how DDOS attacks are dealt with.

[Tulvi]

Horsebleep, if a server is under attack it is NOT not online in the fashion it is designed to do. This should be reflected, not hidden from users. AND as a former server admin, I know how DDOS attacks are dealt with.

It is not hidden from users. There was a Lodestone post about it. The one page you are referring to was not designed to be informing about attacks, only whether the servers are online or under maintenance. They are online, therefore it is not lying.

[IronThistle]

Horsebleep, if a server is under attack it is NOT not online in the fashion it is designed to do. This should be reflected, not hidden from users. AND as a former server admin, I know how DDOS attacks are dealt with.

I beg to differ. The server is online and functioning correctly. The page you reference shows GO/NO_GO status only. The servers are, indeed, up (GO). They are receiving so much traffic that your particular connection isn't able to get through. And if you are a server admin, you know that already. (I used to be an AIX admin, I have some familiarity myself.)

Similar to when expansions first drop and too many people are trying to connect to servers. Some connections get dropped. The DDOS packets are taking advantage of some vulnerability and are probably coming in at a higher priority than our normal connections, which is why nearly every FFXIV player isn't able to login but the DDOS packets are getting through and clogging up all available server connections.

Come now, sir.

[NonBinaryNyan]

Genuinely asking: Is it more helpful to the people at Squeenix trying to fix this if we keep attempting to log in and play? Or is it more helpful to stop until they declare it mended?

I've gotten so many disconnects, lobby connection errors, etc over the last few hours. I've just been giving it a few minutes each time it cuts me off and then trying again b/c I need to do the 16 event. >_<

(Yes I know it's been live for weeks. I wasn't able to play.)

[Kewitt]

I beg to differ. The server is online and functioning correctly. The page you reference shows GO/NO_GO status only. The servers are, indeed, up (GO). They are receiving so much traffic that your particular connection isn't able to get through. And if you are a server admin, you know that already. (I used to be an AIX admin, I have some familiarity myself.)

Similar to when expansions first drop and too many people are trying to connect to servers. Some connections get dropped. The DDOS packets are taking advantage of some vulnerability and are probably coming in at a higher priority than our normal connections, which is why nearly every FFXIV player isn't able to login but the DDOS packets are getting through and clogging up all available server connections.

Come now, sir.

You also know as a server admin, You wouldn't tell people you are having a problem but blame it on a doss attack. That way you can't be blamed for a router or switch falue or some internal traffic. Sure you tell the boss but you don't tell the masses or they will loss faith in your skill.

Filtering out traffic is pretty easy on any firewall that is why pass doss attacks come and go and we end user never really notice them.
This seems to be something different or a really wide spread Doss attack.