Strange ddos-attack

11/27/2014 16:40 terron#1
Hi. I got a problem: my server goes down with a strange ddos attack. It is not http-flood. When the ddos begins nobody can login in the game. But while the server is under attack the site doesn't lag (the site is located on the same hosting server with the game-server) and ingame I don't notice lags too. Аfter a while everything goes down at the same time: FTP (and SSH), the database, the site and the game-server.

I use FreeBSD 10 and Packet Filter, but PF doesn't help against the attack.

Command sockstat -4 -c doesn't show ddossers and other suspicious connects.

Do you have any ideas?
11/28/2014 12:53 .Rєαℓ ' .Iℓℓυмιηαтι'#2
Hey, I'd rate to bring you to you for OvH, a DDoS Protection.
Or just the case of "Cloudfare".
This protects your root IP address.

€ dit: For questions, private message letter.

Mfg.
11/28/2014 13:30 .CHHorny#3
Which host do you use currently? Got any irregular traffic peaks?
11/28/2014 14:14 terron#4
Quote:
Originally Posted by .CHHorny View Post
Which host do you use currently? Got any irregular traffic peaks?
i5 3.8 hhz, 8gb ram, 1gbit channel. Server is being under ddos only while game-server is on. I don't know coincidence is it or not. Server has worked about one year without problems like that.
11/28/2014 14:17 .CHHorny#5
Quote:
Originally Posted by terron View Post
i5 3.8 hhz, 8gb ram, 1gbit channel. Server is being under ddos only while game-server is on. I don't know coincidence is it or not. Server has worked about one year without problems like that.

OVH?
11/28/2014 16:39 terron#6
Quote:
Originally Posted by .CHHorny View Post
OVH?
No, FirstVDS (Russia).
11/28/2014 16:42 .CHHorny#7
Quote:
Originally Posted by terron View Post
No, FirstVDS (Russia).
Time to switch then. Maybe they nullroute you cause of the attack?