DDOS attack

[E4EO]

Last time I managed log in I was only able to play for less then a minute, they're certainly denying service, all right

[Rukhsana]

Today is pretty much a loss. In a couple of hours, game will die due to server maintenance. It sucks!

[RiversideGuy]

Got several disconnects (Primal/Lamia) 2 in the middle of a duty (fortunately it gave me the rewards). I knew something was up when I saw 30 in queue to start today. Then it was 138. AND even though I had stuff to do, things simply weren't working in the game, so I exited.

Thing that really pisses me off is the SE Server status say everything is working correctly. Bulls**t.

[Valkyrie_Lenneth]

Got several disconnects (Primal/Lamia) 2 in the middle of a duty (fortunately it gave me the rewards). I knew something was up when I saw 30 in queue to start today. Then it was 138. AND even though I had stuff to do, things simply weren't working in the game, so I exited.

Thing that really pisses me off is the SE Server status say everything is working correctly. Bulls**t.

Because the servers themselves ARE working correctly.

[Tulvi]

Thing that really pisses me off is the SE Server status say everything is working correctly. Bulls**t.

Server status page is not lying. It is there to inform only about whether the servers are online, which they are. That page is not there to say if it’s running correctly, only if it’s running.

[Jeeqbit]

It's a Distrubuted Denial of Service attack. Where lots of different machines attack at the same moment, so they can't just ban a single IP.

They have happened for years (like even SB I think at least), often at routes leading to the server affecting specific ISPs. But SE got good at contacting those ISPs and setting up countermeasures instead of blaming customers.

So DDoS attacks stopped being very effective anymore until this one.

[RiversideGuy]

Horsebleep, if a server is under attack it is NOT not online in the fashion it is designed to do. This should be reflected, not hidden from users. AND as a former server admin, I know how DDOS attacks are dealt with.

[Tulvi]

Horsebleep, if a server is under attack it is NOT not online in the fashion it is designed to do. This should be reflected, not hidden from users. AND as a former server admin, I know how DDOS attacks are dealt with.

It is not hidden from users. There was a Lodestone post about it. The one page you are referring to was not designed to be informing about attacks, only whether the servers are online or under maintenance. They are online, therefore it is not lying.

[IronThistle]

Horsebleep, if a server is under attack it is NOT not online in the fashion it is designed to do. This should be reflected, not hidden from users. AND as a former server admin, I know how DDOS attacks are dealt with.

I beg to differ. The server is online and functioning correctly. The page you reference shows GO/NO_GO status only. The servers are, indeed, up (GO). They are receiving so much traffic that your particular connection isn't able to get through. And if you are a server admin, you know that already. (I used to be an AIX admin, I have some familiarity myself.)

Similar to when expansions first drop and too many people are trying to connect to servers. Some connections get dropped. The DDOS packets are taking advantage of some vulnerability and are probably coming in at a higher priority than our normal connections, which is why nearly every FFXIV player isn't able to login but the DDOS packets are getting through and clogging up all available server connections.

Come now, sir.

[Kewitt]

I beg to differ. The server is online and functioning correctly. The page you reference shows GO/NO_GO status only. The servers are, indeed, up (GO). They are receiving so much traffic that your particular connection isn't able to get through. And if you are a server admin, you know that already. (I used to be an AIX admin, I have some familiarity myself.)

Similar to when expansions first drop and too many people are trying to connect to servers. Some connections get dropped. The DDOS packets are taking advantage of some vulnerability and are probably coming in at a higher priority than our normal connections, which is why nearly every FFXIV player isn't able to login but the DDOS packets are getting through and clogging up all available server connections.

Come now, sir.

You also know as a server admin, You wouldn't tell people you are having a problem but blame it on a doss attack. That way you can't be blamed for a router or switch falue or some internal traffic. Sure you tell the boss but you don't tell the masses or they will loss faith in your skill.

Filtering out traffic is pretty easy on any firewall that is why pass doss attacks come and go and we end user never really notice them.
This seems to be something different or a really wide spread Doss attack.