Bitcointalk downtime, or just me? Edit: DDoS attack confirmed as per Theymos

[InvoKing]

The ddos is still active or what? I couldn't browse the forums in the last 30 minutes without having a connection problem, don't know if this issue happens only now or it is persistant..
Theymos please fix it 

[1714727681]

1714727681

[1714727681]

1714727681

[1714727681]

1714727681

[1714727681]

1714727681

[1714727681]

1714727681

[achow101]

I guess they're going to do it every day at around this time until I figure out how to stop them... I've made some progress on that front, but it's not done yet.

If anyone is an actual expert in Linux networking (ie. the term "GRE tunnel" is familiar to you), I could use your help in figuring some of this stuff out.

Instead of Cloudflare use an DDoS protected Reverse Proxy IP. The Cloudflare Free Plan is not helping at all, to stop an big attack.


Edit: It seems you switched to Cloudflare and forgot to add SPF Records which fail to deliver mails to most known email provider. However, I do not receive notifications of Bitcointalk.

What are you talking about? Bitcointalk doesn't use Cloudflare.

The ddos is still active or what? I couldn't browse the forums in the last 30 minutes without having a connection problem, don't know if this issue happens only now or it is persistant..
Theymos please fix it 

You can't stop a DDoS attack, you can only attempt to mitigate the effects of the attack. Theymos is still trying to figure out a way to mitigate the effects, but clearly networking isn't his expertise.

[awesome31312]

The ddos is still active or what? I couldn't browse the forums in the last 30 minutes without having a connection problem, don't know if this issue happens only now or it is persistant..
Theymos please fix it 

I hate to be that post but, yeah, I agree, please fix it. I really really am addicted to this forum, say what you want, but just like people have their Netflix, television, etc, I have Bitcointalk, and without it I really don't have a hobby anymore

I hope you fix it soon. I know you're trying your best.

Isn't it possible to change servers?

[Swagtoshi]

The ddos is still active or what? I couldn't browse the forums in the last 30 minutes without having a connection problem, don't know if this issue happens only now or it is persistant..
Theymos please fix it  

I hate to be that post but, yeah, I agree, please fix it. I really really am addicted to this forum, say what you want, but just like people have their Netflix, television, etc, I have Bitcointalk, and without it I really don't have a hobby anymore

I hope you fix it soon. I know you're trying your best.

Isn't it possible to change servers?

If you change servers, the person who is ddosing will simply redirect their computers toward the new server. Plus, it takes a while to point nameservers.

[btvGainer]

The ddos is still active or what? I couldn't browse the forums in the last 30 minutes without having a connection problem, don't know if this issue happens only now or it is persistant..
Theymos please fix it 

I had similar experience two days back also and now today again wasn't able to visit forum as it was unavailable.
Yes it should be fixed now.Is Theymos aware of this problem?

[awesome31312]

The ddos is still active or what? I couldn't browse the forums in the last 30 minutes without having a connection problem, don't know if this issue happens only now or it is persistant..
Theymos please fix it 

I had similar experience two days back also and now today again wasn't able to visit forum as it was unavailable.
Yes it should be fixed now.Is Theymos aware of this problem?

Yes, please read the thread before commenting. The notice has been posted in "News" below your Total time logged in, he has also stated here that he is working on figuring out a way to mitigate the attack, and we can expect more periodic downtime

[Quickseller]

Can't afford a cloudfare ddos protection [...]?

I think it might be time to reconsider using cloudflare or similar service.

In the past, one of the main reasons why it was said cloudflare will not be used is that theymos would need to give up effective control over the HTTPS keys to google in order to use cloudflare.

However with the claim that bitcointalk.org (and bitoin.org) might be the subject of state-sponsored hacking attempts (and that such state-sponsored hackers might be able to compromise and/or impersonate the HTTPS keys).

The argument behind theymos maintaining exclusive control over the HTTPS keys is that he would be able to (and be expected to) push back against legal processes demanding access to information that would be accessible with the HTTPS keys. However, IMO google would likely be better equipped to counter state-sponsored hacking attempts, and would have greater resources to do so. Giving google effective access to the HTTPS keys would not make users defenseless against illegitimate requests for information accessible with HTTPS keys because, at the very least there will be some level of judicial oversight over legal processes requesting information, and even when this is insufficient, theymos would likely still be able to fight these kinds of requests to some extent. 

[awesome31312]

I think we are no longer being attacked. Why do the news still speculate there may be periodic downtime?

[Atomicat]

I think we are no longer being attacked. Why do the news still speculate there may be periodic downtime?

Maybe theymos forget to remove it from the News section.

IIRC, I saw that message a few times too.

EDIT: I saw the message again and got a chance to copy it. ;p
"Due to DDoS attacks, there may be periodic downtime."

[Omikifuse]

I think we are no longer being attacked. Why do the news still speculate there may be periodic downtime?

Maybe theymos forget to remove it from the News section.

IIRC, I saw that message a few times too.

EDIT: I saw the message again and got a chance to copy it. ;p
"Due to DDoS attacks, there may be periodic downtime."

You never know when the forum will be attacked again, so I guess it is stickied while there is no other news to show

[Gleb Gamow]

<just sharin' what I've learnt today is all>

https://en.wikipedia.org/wiki/Denial-of-service_attack#DDoS_extortion

In 2015, DDoS botnets such as DD4BC grew in prominence, taking aim at financial institutions. Cyber-extortionists typically begin with a low-level attack and a warning that a larger attack will be carried out if a ransom is not paid in Bitcoin. Security experts recommend targeted websites to not pay the ransom. The attackers tend to get into an extended extortion scheme once they recognize that the target is ready to pay.

Solon, Olivia (9 September 2015). "Cyber-Extortionists Targeting the Financial Sector Are Demanding Bitcoin Ransoms". Bloomberg. Retrieved 15 September 2015.

[awesome31312]

<just sharin' what I've learnt today is all>

https://en.wikipedia.org/wiki/Denial-of-service_attack#DDoS_extortion

In 2015, DDoS botnets such as DD4BC grew in prominence, taking aim at financial institutions. Cyber-extortionists typically begin with a low-level attack and a warning that a larger attack will be carried out if a ransom is not paid in Bitcoin. Security experts recommend targeted websites to not pay the ransom. The attackers tend to get into an extended extortion scheme once they recognize that the target is ready to pay.

Solon, Olivia (9 September 2015). "Cyber-Extortionists Targeting the Financial Sector Are Demanding Bitcoin Ransoms". Bloomberg. Retrieved 15 September 2015.

Wow, thank you so much for sharing, this could explain why so many websites are going through DDoS attacks right now!