4 ms·
This is what happens to your servers when you are under DDoS
I added SYNPROXY to netdata and posted here: https://www.reddit.com/r/linux/comments/4dyqdj/realtime_monitoring_of_linux_antiddos_protection/
Then they attacked, today, the netdata demo server, twice!
Do you want to see what happens to your servers when you are DDoS?
1. Go to http://netdata.firehol.org/#netdata
2. zoom out the netdata.requests chart completely (if you follow the link, it will be just on your screen, just under the pop-up) (zoom out using SHIFT + mouse wheel, on chrome and opera only - sorry no zoom on firefox and IE yet)
3. you will see 2 spikes
4. Zoom in to any of them and then navigate to the all the other charts.
This is what happens when you are under DDoS! Check nginx, CPU, interrupts, the connection tracker (peaked at 37.000 connections!).
Do it now, the server has a round robin DB, of 24 hours only - it will be available for about 12 hours only.
Unbelievable!
- ktsaou 11y agoSee the attack here: http://netdata.firehol.org/#netdata http://netdata.firehol.org/#netdata (follow the instructions above) My post to reddit: https://www.reddit.com/r/linux/comments/4dyqdj/realtime_monitoring_of_linux_antiddos_protection/ https://www.reddit.com/r/linux/comments/4dyqdj/realtime_moni... The article at the netdata wiki: https://github.com/firehol/netdata/wiki/Monitoring-SYNPROXY https://github.com/firehol/netdata/wiki/Monitoring-SYNPROXY (and my response to the attackers)
- ktsaou 11y agodirect link to the first attack: http://netdata.firehol.org/?force_before_ms=1460213988000&force_after_ms=1460213669000#netdata http://netdata.firehol.org/?force_before_ms=1460213988000&fo... direct link to the second attack: http://netdata.firehol.org/?force_before_ms=1460226227000&force_after_ms=1460225741000#netdata http://netdata.firehol.org/?force_before_ms=1460226227000&fo...