Hey guys, just wanted to give you an update. I previously informed everyone here that Wuxiaworld seemed to be under a DDOS attack, and that I was turning on DDOS protection from Cloudflare. The stats are now in, and this DDOS attack has been confirmed. See below the jump for more details.
For those of you who are interested, this appears to be a ‘layer 7’ DDOS attack at the application layer, a type of attack that basically ‘mimics’ human behavior to overwhelm a server. For those of you who are curious what it is like, let me show you some pictures. The first is of my normal traffic. As you can see, it has remained fairly stable over the past seven days. The second is of the threats.
As you see, the threats spiked dramatically on April 3rd, continued throughout April 4th, and is continuing today. How dramatic is it? Well, while we normally have around ~2-3 million hits (which are different from pageviews) per day, over the last 48 hours, we have been getting ~70 million hits from sources Cloudflare has categorized as ‘threats’ every day. No wonder the server was crumbling until I turned on the “I’m Under Attack” DDOS protection; we were getting hit with 20-30 times our normal traffic! And no wonder whenever I turn it off, even for 5-10 seconds, the server load begins to spike almost instantly! If we had no Cloudflare, we would be getting crushed.
The same is true when I looked at the bandwidth usage. While on a normal day we would use 30 gigabytes of bandwidth, yesterday, we were hit with 300 gigabytes of usage. This number is actually fairly low compared to most DDOS attacks, and it’s mainly because ‘layer 7’ attacks are much less bandwidth intensive than other types of DDOS attacks.
I’m not sure if it is someone with a grudge against me, someone trying to troll the community, or just someone doing it for the ‘lulz’, but for now, we are indeed under DDOS attack, so I’ll have to leave the DDOS protection on. Thank you all for your patience during this period of time. While I know that occasionally getting the ‘five second pause’ page is annoying, it is better than having no website at all, right? Thanks all!