Jump to content
3DXChat Community

Recommended Posts

2 minutes ago, Cassey said:

I am confused now. Why have not Cloudup or 3DX site manager blocked the attack? I was surprised to see I still could not get in to 3DX tonight. This should not go on for 3 to 7 days, uh?

Cloudflare has tried, at least for the website. If the game server doesn't use HTTP(s), however, they'd have to stop running or giving access to the server altogether, because I don't think (as far as I recall) they manage non-http services the same way.

3DX is mostly powerless as this is an attack on their bandwidth, not their servers (except as far as the resources to manage their connections is concerned.) IP Bans at least require some sort of connection attempt. If there is no ability to receive the connection at all, then it's impossible to block -- or do anything productive.

Share this post


Link to post
Share on other sites
Posted (edited)
19 minutes ago, redheadrider said:

Cloudflare has tried, at least for the website. If the game server doesn't use HTTP(s), however, they'd have to stop running or giving access to the server altogether, because I don't think (as far as I recall) they manage non-http services the same way.

3DX is mostly powerless as this is an attack on their bandwidth, not their servers (except as far as the resources to manage their connections is concerned.) IP Bans at least require some sort of connection attempt. If there is no ability to receive the connection at all, then it's impossible to block -- or do anything productive.

Thank you redheadrider, I am still surprised Cloudflare whom claim to be one of the best cannot stop the attack like most other businesses do. Purchased services maybe...

Edited by Cassey

Share this post


Link to post
Share on other sites
On 5/15/2020 at 5:40 PM, jadekhali said:

If you want XGold Transfers between members I suggest you hang out at Achat with all the child molesters over there who will gladly give you gold so you can buy a new dress  as long as you pretend to be 12 years old and shrink your tits......try not to get too many nightmares thinking about their real life kids.......

must be hard jade ignoring every name that cant stand you.full time job u troll

Share this post


Link to post
Share on other sites
On 5/16/2020 at 4:57 AM, Gypsy said:

@CaptainAmerica: May I suggest to stop talking about topic that you seem not to fully understand? Sorry to say this, but you don't seem to have the right technical skills and experience  on how to prevent DDoS attacks and how to set up your infrastructure. There are ways to protect that would required to nearly bring the whole internet down before your servers get affected.

And in case you would now want to tell me that also other larger companies get affected, this is obviously true. But just out of experience, there is only a very few number of companies that really do their protection of the core systems correctly (in addition: one single small failure would make all your efforts obsolete.

On the other side, I know that this is a relatively theoretical discussion as and here I agree with most here, the ones that run this game have likely not the money for such protection mechanisms nor would it be their core business to have these. 

I don't know what is your background or what experience you have (you also don't know mine). Unless you have your own AS number, run BGP and have a few multi-path links you don't have full control of how to mitigate a decent DDoS attack. If you just rent a few dedicated servers or VPS just like 3dxchat is doing, there are not many things you can do. You just take what kind of internet connectivity the datacenter gives you and in case you are under attack you are just in contact with them so that they can solve the issue. I can assure you that a majority of big datacenters don't have DDoS protection at all. It is critical that they route all their traffic through some service like Cloudflare (like they do now) in order for your real backend IP to not be known to the attacker. I'm 100% positive that the attack is happening directly on the backend because if they were attacking Cloudflare there would be no issue. Using some decompiler on the client or even easier, using a packet sniffer you can easily get the backend's IP since this is exactly where all the clients connect to for authentication and real-time chat and actions.

You say that I don't know what I'm talking about, but you are saying unrealistic things. I am always speaking with the current situation in mind. I could say that if you're under attack, just do a BGP peering with Google and announce your AS number over that link since they obviously have the capacity to mitigate the attack. Or just move your entire server to a datacenter that colocates some huge ISP and do a local peering with them lol but these are not a realistic scenarios.

Since their real backend's IP is exposed, there is not much they can do right now. They just chat back and forth with their datacenter's network team and hope that they know what they're doing. Of course if everything was going through Cloudflare (paid not the free one), we would be having a totally different conversation right now.

Also, imagine being in a sex game's forum and trying to show who is the biggest tech nerd lol

XO

Share this post


Link to post
Share on other sites
21 minutes ago, Cassey said:

Thank you redheadrider, I am still surprised Cloudflare whom claim to be one of the best cannot stop the attack like most other businesses do. Purchased services maybe...

Cloudflare's approach isn't to *stop* it per se... it's to spread out the attack across their network, so no one part fails.

Share this post


Link to post
Share on other sites
Posted (edited)
Hace 5 minutos, CaptainAmerica dijo:

No sé cuál es tu experiencia o qué experiencia tienes (tampoco conoces la mía). A menos que tenga su propio número AS, ejecute BGP y tenga algunos enlaces de múltiples rutas, no tiene control total sobre cómo mitigar un ataque DDoS decente. Si solo alquila algunos servidores dedicados o VPS como lo hace 3dxchat, no hay muchas cosas que puedan hacer. Simplemente tome qué tipo de conectividad a Internet le brinda el centro de datos y, en caso de que esté bajo ataque, simplemente está en contacto con ellos para que puedan resolver el problema. Les puedo garantizar que la mayoría de los grandes centros de datos no tienen protección DDoS en absoluto.Es fundamental que dirijan todo su tráfico a través de algún servicio como Cloudflare (como lo hacen ahora) para que el atacante no conozca su IP de fondo real. YO soy 100% positivo de que el ataque ocurrió directamente en el backend porque si estuvieran atacando Cloudflare sin ningún problema. Usando algún descompilador en el cliente o incluso más fácil, usando un sniffer de paquetes, puede obtener fácilmente la IP del backend, ya que aquí es exactamente donde todos los clientes se conectan para autenticación y chat y acciones en tiempo real.

Dices que no sé de qué estoy hablando, pero estás diciendo cosas poco realistas. Siempre estoy hablando con la situación actual en mente. Podría decir que si estás bajo ataque, solo haz un BGP con Google y anuncia tu número AS a través de ese enlace, ya que tienen la capacidad de mitigar el ataque. O simplemente mueva todo su servidor en un centro de datos que ubique en un gran ISP y realice un intercambio local con ellos jajaja, pero estos no son escenarios reales.

Dado que la IP de su backend real está expuesta, no hay mucho que puedan hacer en este momento. Simplemente chatean de un lado a otro con el equipo de red de su centro de datos y esperanzas lo que están haciendo. Por supuesto, si todo sucedió a través de Cloudflare (pagado no el gratuito), podríamos tener una conversación totalmente diferente en este momento.

Además, imagina estar en el foro de un juego sexual y tratar de mostrar quién es el nerd tecnológico más grande jajaja

XO

Quiero preguntarte, mediante tus conocimientos, cuanto tiempo tardará en regresar el juego? lleva 2 dias... 

Edited by Natalys

Share this post


Link to post
Share on other sites
Posted (edited)

Translation using translator, and I am logging off. Be safe and well everyone.

"I want to ask you, through your knowledge, how long will it take to return the game? It takes 2 days..."

Edited by Cassey

Share this post


Link to post
Share on other sites
2 minutes ago, Natalys said:

Quiero preguntarte, mediante tus conocimientos, cuanto tiempo tardará en regresar el juego? lleva 2 dias... 

From my personal experience, DDoS attacks don't last that long. The biggest attack I have personally seen happening in networks that I manage, a bit more than 24 hours. So... Either the attacker has lots of money to spend and doesn't care, or maybe something else is happening that we don't know of. I couldn't tell. We just have to assume that they are doing the best they can.

Share this post


Link to post
Share on other sites
3 minutes ago, Natalys said:

Quiero preguntarte, mediante tus conocimientos, cuanto tiempo tardará en regresar el juego? lleva 2 dias... 

Based on the detail from @CaptainAmerica regarding protection of the real IP address -- it'll take the amount of time the DDoS has left, unfortunately. That means the game server is being directly attacked... if it's currently running. It's not likely possible to play the game while we have them attacking the server, definitely so if the protection is turning the server off.

Share this post


Link to post
Share on other sites
Just now, JollyWog said:

So you're trying to tell me that we don't  have a back-up server like  a we would have a generator for a blackout?

Furthermore no systems  or contingency plans in place for such a problem, given that there has been similar problems in the past...

Even worse this  has happened on the weekend, the only days when I  get  to see  my 'in-game wifey'...

2016-08-20 22.23.28-25 (2).jpg

Our previous problems have been server instability from normal use.

A backup server would have to somehow have our production data still for it to be useful. There's no guarantee that that server is currently usable.

Share this post


Link to post
Share on other sites

As promised for Gizmo, Lisa and anybody else who's helping in any way to get our crazy,kinky but highly entertaining game back.Some moral support in the form of some great food,great wines;beers and whiskeys. Enjoy! We luv ya! (Cyber food and drink for a cyber world.)

 

holiday-christmas-food-8-600x400.jpg

imagesfinewines.jpg

indexbb.jpg

indexbw.jpg

Share this post


Link to post
Share on other sites
8 minutes ago, Norfolk N Waye said:

As promised for Gizmo, Lisa and anybody else who's helping in any way to get our crazy,kinky but highly entertaining game back.Some moral support in the form of some great food,great wines;beers and whiskeys. Enjoy! We luv ya! (Cyber food and drink for a cyber world.)

 

holiday-christmas-food-8-600x400.jpg

imagesfinewines.jpg

indexbb.jpg

indexbw.jpg

Mmm you are providing a feast! Let me in too! lol

Share this post


Link to post
Share on other sites

The general concenous seems to be a few days, and all Gizmo can do is work with his data centre, Which I am very sure he is. The attack was obviously done on the Friday to make sure it was difficult to sort over the weekend. The rest of the tech stuff I can not comment on but the information from some has been very useful in understanding what is happening.

Share this post


Link to post
Share on other sites
On 5/16/2020 at 7:38 AM, Gizmo said:

Guys, we're still under attack. We managed to keep the forum stable, but the main game server is still unavailable. We have taken a number of protective steps and continue our work to bring you back into the game. This is our main goal.
Thanks for your support!

This is the last statement, a bit over 24 hours ago. And, as many people have said in the thread, sometimes these attacks will just have to time themselves out. It´s frustrating, but it is what it is.

Share this post


Link to post
Share on other sites

It's everyone's best guess, what is actually happening. The only fact is that the service is disrupted for one reason or another.

It's a DDOS attack and they are actually working (doing what exactly?) restoring the service, and you can chose to believe the devs who usually say things without backing it up, and they have a long history doing that.

Or maybe it's something else, but you can chose to believe anything.

The fact is, that the game doesn't work, and we can't access the servers.

So some of you can come here praising them for the hard work they do, even if you don't know at all if they even do anything on that side

While others simply rage about it, and start childish arguments around here.

The point is, no matter what you do or what you believe, we just have to wait it out

Share this post


Link to post
Share on other sites
Posted (edited)

DDoS attacks can last anywhere from minutes to days. Or they last 24 hours, stop, wait a few days and attack again. Even if the DDoS attacks have stopped it still makes sense to work on the servers and client to take preventative measures, otherwise in a few days we will just have the exact same situation. I would prefer the servers stay offline for longer with a more long term fix than just rushing the game back as soon as the DDoS attacks stop momentarily. Also, the changes to the server may also require a patch for the game so that the game works with the new server config, so there are many factors to consider. I can only hope that the wait is worth it and the game is more resilient to future DDoS attacks, which will only get more frequent as the game grows in popularity and becomes a bigger target.

Also, keep in mind, 3DX is a small development team. They don’t have 24/7 server admins who gets paid $100k’s a year whose sole job it is to keep the likes of Microsoft and Sony up and running.

Edited by Mulan

Share this post


Link to post
Share on other sites
13 minutes ago, Cruna said:

It's everyone's best guess, what is actually happening. The only fact is that the service is disrupted for one reason or another.

It's a DDOS attack and they are actually working (doing what exactly?) restoring the service, and you can chose to believe the devs who usually say things without backing it up, and they have a long history doing that.

Or maybe it's something else, but you can chose to believe anything.

The fact is, that the game doesn't work, and we can't access the servers.

So some of you can come here praising them for the hard work they do, even if you don't know at all if they even do anything on that side

While others simply rage about it, and start childish arguments around here.

The point is, no matter what you do or what you believe, we just have to wait it out

FINDS THIS TO BE THE BEST ANSWER SO FAR...NO ONE REALLY KNOWS ANYTHING.....SO WE WAIT IT OUT

Share this post


Link to post
Share on other sites
18 minutes ago, Mulan said:

DDoS attacks can last anywhere from minutes to days. Or they last 24 hours, stop, wait a few days and attack again. Even if the DDoS attacks have stopped it still makes sense to work on the servers and client to take preventative measures, otherwise in a few days we will just have the exact same situation. I would prefer the servers stay offline for longer with a more long term fix than just rushing the game back as soon as the DDoS attacks stop momentarily. Also, the changes to the server may also require a patch for the game so that the game works with the new server config, so there are many factors to consider. I can only hope that the wait is worth it and the game is more resilient to future DDoS attacks, which will only get more frequent as the game grows in popularity and becomes a bigger target.

Also, keep in mind, 3DX is a small development team. They don’t have 24/7 server admins who gets paid $100k’s a year whose sole job it is to keep the likes of Microsoft and Sony up and running.

Agree totally Mulan

Share this post


Link to post
Share on other sites
Posted (edited)

hmmm not sure its a DDOS attack. DDOS attacks programs are not able to shut off an IP adress for days. only some hours max.

i think they messed up something in their server, and telling us its a DDOS 😁😁

 (Also, Lisa would not have mentioned remboursement in the discord, if she expect server to be down for only short time^^)

Edited by Pierrousss

Share this post


Link to post
Share on other sites

To add to my previous post.... it could be several days to a week because there is only so much the devs can do about this. There are probably only two resolutions....

1. the attacker stops attacking maybe because they ran out of money to pay for the DDOS attack (see my previous post)

2. the devs front-end the game server with Cloudflare (or another CDN) like they have already done with the this forum site (if you haven't noticed). This may take an update to the game client which means we might all have to re-download the client if they move the game serer behind the cloudflare service.

Success breeds visibility.... and visibility breeds enemies.

chirp-chirp tweet-tweet

Robin

Share this post


Link to post
Share on other sites
1 minute ago, DannyAb said:

Playstation Network's DDos last 2 months, just saying...

Playstation Network doesn't die from that. they have billions in their pocket.

3dxchat would be dead, gone and forgotten from something similar

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

×
×
  • Create New...