[4+ EH] Slush Pool (slushpool.com); Overt AsicBoost; World First Mining Pool

[slush]

This is down now.

Yes, attack moved to new machines, too.

[Graet]

I assume all this action is gonna slow you down on getting the accounting done for NMC?

Isn't that kinda like asking your neighbor is he is going to return your powertools while his house is on fire?

isnt that how bitcoin works?
(my observation anyway)

[hchc]

any updates? Its been down for the last few hours for me.

[slush]

hchc: I'm in contact with company for doing ddos mitigation, however it's taking some time - it is 6am here.

[pekv2]

hchc: I'm in contact with company for doing ddos mitigation, however it's taking some time - it is 6am here.

Thanks for the update, Slush.

[sadpandatech]

hchc: I'm in contact with company for doing ddos mitigation, however it's taking some time - it is 6am here.

Thanks for the update, Slush.

Yes, thank you! And, when do you sleep? 

[Iyeman]

hchc: I'm in contact with company for doing ddos mitigation, however it's taking some time - it is 6am here.

Thanks for the update, Slush.

Yes, thank you! And, when do you sleep? 

Sleep is for when your dead.

[allinvain]

Looks like them DDoS'ing sons of bitches are persistent - attack is still ongoing. I've had to move my miners elsewhere for the time being. Hope you come back online soon slush.

Best of luck to us all!

[tommyl]

If all the big mining pools are taken down, perhans they can quickly redirect their zombies to hashing and screw up the block chain. Is that too conspiratory or would it be realistic? As of now they have effectively halved the network computation speed: http://bitcoin.sipa.be/

[wezzy]

Thanks Slush for all your hard work! Sucks to be ddosed, will wait for you to come online again

[ajareselde]

Thanks Slush for all your hard work! Sucks to be ddosed, will wait for you to come online again

I know ill be back in this pool the minute the attacks stop. Youre still the best !

[slush]

Pool is up again. Note that all website traffic is routing thru 3rd party DDoS mitigation service, so SSL isn't working at this moment. But it is only temporary and as all important changes on profiles must be confirmed by email, it's not so big issue.

[slush]

ok, I see that most of clients are still blacklisted, working on it now.

[FoxMURDER]

my guess is that those attacks are supposed to lower the difficulty as much as possible for the next round ... so maybe they stop in 75 or so blocks ...
(still just a guess though)

[slush]

I found one issue so even you connect, you'll probably will see a lot of rejecteds. I'm working on it, will be solved in few minutes.

[slush]

All clients which were previously connected are in whitelist now.

[slush]

Yay, first block since DDoS started. It was almost 17 hour round, insane. Initally thanks to bad luck and then thanks to DDoS (another kind of bad luck).

[sadpandatech]

All clients which were previously connected are in whitelist now.

I am still unable to connect, (using pull down in gui to slect Slush, so not sure if I need to put in dif server for you) coming from a 98.70.*.* Block(s)


edit; tried again 2 minutes after posting and now it is in. >.<

[slush]

sadpandatech: attack is still here, we're both fighting with that. Actually attack got a little more intensive before few minutes, but mining still works (though with connection errors sometimes).

[sadpandatech]

sadpandatech: attack is still here, we're both fighting with that. Actually attack got a little more intensive before few minutes, but mining still works (though with connection errors sometimes).

thanks for the response, m8.  I see you mentioned whitelisting, did you end up having to go the 'Deny All' route?

 Have you had any chance to analyze the attack packets? There has got to be some sort of identifiable trace in them that can be filtered out.  Assuming your Host or upstream provider is using any kind of packet marking capabilities, its hard to suggest to them what methods to deploy without knowing how the attacks are coming in. Are they spoofed syn attacks, reflector type or what? Anything other than UDP based flooding can be stamped out with a 'Stack Pi' type mechanism. UDP can be strictly filtered from the upstream side.  Sorry to be so buggy, I owned an ISP many moons ago and had to deal with a lot of this kind of crap.

   Cheers, m8