News for hackers. Stuff that matters.
Re:An update from Linode about the recent DDoS attacks by nly on Thursday December 31, 2015 @06:01PM (#10820212)
> As someone whose business relies on Linode currently to function

Perhaps its time to consider some failover at another host. Same goes for anyone solely dependent on anyone.

Re:An update from Linode about the recent DDoS attacks by jafingi on Thursday December 31, 2015 @07:09PM (#10820470)
How do you guys re-route traffic for your load balancer to another in another data center? If you change your DNS record it would take x time before it has propagated.

Say I have one server setup on Linode London and one duplicated on DO Amsterdam. How do I quickly re-route the traffic from my two main load balancers London to Amsterdam without much propagation time?

Re:An update from Linode about the recent DDoS attacks by scurvy on Thursday December 31, 2015 @10:15PM (#10820981)
Keep TTL's low (3-5 minutes). Things don't have to happen instantly. Clients understand. You had a bad day on the Internet. Guess what, stuff happens. Remember when "XYZ company down for 2 hours" made headlines? Yeah, that was a long time ago. Downtime is more or less accepted these days. Sure, some hothead customers will flip out and leave. You were probably not going to meet their expectations sometime and lose them eventually. Let them become someone else's nightmare.*

* This is for an answer for the average "Hey I run a website or two" question. If you're asking and you are dealing with financial transactions or ad networks, well, you're asking in the wrong place and you should probably hire someone that knows how BGP anycasting works.

Re:An update from Linode about the recent DDoS attacks by lsc on Friday January 01, 2016 @04:59AM (#10821522)
>* This is for an answer for the average "Hey I run a website or two" question. If you're asking and you are dealing with financial transactions or ad networks, well, you're asking in the wrong place and you should probably hire someone that knows how BGP anycasting works.

Eh, usually you just bgp anycast the DNS server. If you anycast just your DNS server, you are pretty much in the same pickle as if you host your dns with someone else who runs a reliable dns server (and have them do the anycast) - the pickle is that there's a minimum ttl.

Now you can set up a redirector server and anycast that, and like 3xx redirect all your requests (or more often just the first request) and that's better, really, 'cause that redirect can be changed quickly and on a per-request (or more often per-session) basis... but while I know a thousand companies that will sell you anycast DNS service, I don't know anyone who will sell someone with a vps customer budget an anycast'd redirector service.

Re:An update from Linode about the recent DDoS attacks by atmosx on Thursday December 31, 2015 @07:40PM (#10820586)
You cab use round-robin DNS ... Keep two DB in sync between different hosts/providers and effectively switch the DNS if host1 or host2 goes down. However this setup is easy for a kind of applications but may not be suited for other kind of apps.
Re:An update from Linode about the recent DDoS attacks by manigandham on Friday January 01, 2016 @09:45AM (#10821984)
We use a CDN. They provide caching and act as another layer of defense beyond the origin datacenter/provider.

Because they physically route the traffic, you can change backends pretty quickly and have traffic going to the new destination within seconds or minutes. Using DNS for end-users just has too much unpredictable latency, but it works well for routing the backend.

Re:An update from Linode about the recent DDoS attacks by pbowyer on Thursday December 31, 2015 @06:53PM (#10820411)
What's the current status for Database failover? MySQL in my case - to mirror that is what's been holding me back.

What happens with 1/10 second's database records not replicated? That could be a successful transaction on one, and no record of it on the other?

Re:An update from Linode about the recent DDoS attacks by mschuster91 on Thursday December 31, 2015 @07:08PM (#10820469)
> What happens with 1/10 second's database records not replicated?

You can use a multi-master setup and strict consistency checks, though.

Re:An update from Linode about the recent DDoS attacks by scurvy on Thursday December 31, 2015 @10:10PM (#10820971)
Multi-master MySQL is generally regarded to be a very, very bad idea. Single master with multiple GTID replicas and promoting a replica to master upon failure is BCOP.
Re:An update from Linode about the recent DDoS attacks by silverlight on Thursday December 31, 2015 @06:05PM (#10820230)
Certainly what we're in the process of doing.
Re:An update from Linode about the recent DDoS attacks by mwcampbell on Thursday December 31, 2015 @06:26PM (#10820315)
I'm surprised you haven't completely jumped ship already, considering that there are two other providers in particular that offer very similar specs and prices to Linode. Where I work, we moved our primary infrastructure off of Linode the night after the attacks started.
Re:An update from Linode about the recent DDoS attacks by workitout on Thursday December 31, 2015 @06:32PM (#10820332)
I've tried a lot over the years, no one can compare to the VPS quality Linode provides is what I found.
Re:An update from Linode about the recent DDoS attacks by brandon272 on Thursday December 31, 2015 @07:00PM (#10820442)
All (major) providers suffer from DDoS attacks.
Re:An update from Linode about the recent DDoS attacks by tshtf on Thursday December 31, 2015 @07:07PM (#10820462)
When was the last successful sustained (1 week plus) CloudFlare, GCE, or AWS DDoS attack?
Re:An update from Linode about the recent DDoS attacks by brandon272 on Thursday December 31, 2015 @08:20PM (#10820706)
I have no idea.

CloudFlare doesn't offer VPS instances. Google and Amazon are in a league of their own and, last I checked, don't offer the similar services at the same prices with the same level of support and same controls. Amazon might send you a nice bill at the end of the attack depending on what type it was.

DigitalOcean, as an example, routinely receives DDoS attacks and will just nullroute your VPS automatically until the attack ends.

Re:An update from Linode about the recent DDoS attacks by adamzoz on Friday January 01, 2016 @09:30PM (#10824672)
Its a concern of mine with AWS, no downtime but a $30k for the day of fun bill. Got to tie up this loose end before I wake up broke one day.
Re:An update from Linode about the recent DDoS attacks by nly on Thursday December 31, 2015 @09:04PM (#10820809)
There are VPS providers that offer DDoS protection in the 10-20Gbps range, but that is a piddle in the ocean these days.
Re:An update from Linode about the recent DDoS attacks by nickpsecurity on Friday January 01, 2016 @02:03PM (#10822866)
Which ones and protection against what attacks?
Re:An update from Linode about the recent DDoS attacks by nly on Saturday January 02, 2016 @12:26AM (#10825200)
Ramnode, Vultr, others.