This is what happens to your servers when you are under DDoS

6 points

10 years ago

I added SYNPROXY to netdata and posted here: https://www.reddit.com/r/linux/comments/4dyqdj/realtime_monitoring_of_linux_antiddos_protection/

Then they attacked, today, the netdata demo server, twice!

Do you want to see what happens to your servers when you are DDoS?

1. Go to http://netdata.firehol.org/#netdata

2. zoom out the netdata.requests chart completely (if you follow the link, it will be just on your screen, just under the pop-up) (zoom out using SHIFT + mouse wheel, on chrome and opera only - sorry no zoom on firefox and IE yet)

3. you will see 2 spikes

4. Zoom in to any of them and then navigate to the all the other charts.

This is what happens when you are under DDoS! Check nginx, CPU, interrupts, the connection tracker (peaked at 37.000 connections!).

Do it now, the server has a round robin DB, of 24 hours only - it will be available for about 12 hours only.

Unbelievable!

2 comments