22 ms·
Gandi.net was under DDoS
- esamueljohnson 6y agoWe under DDoS, teams are working to mitigate the attack.
- phil21 6y agoBad timing here, was about to renew a few personal domains and do some DNS record maintenance. Good luck to the ops team! Never fun on a Friday night...
- fahrradflucht 6y agoIt is Saturday morning in Paris :-)
- sohamsankaran 6y agoGandi has been my registrar for years -- they're solid, high-integrity folks. Hope they manage to resolve this without too much damage.
- idnag_kcuf 6y agoI used to think that. But from my experiences, their customer service is crap, and I had a bunch of downtime on their VPS offering with no compensation offered. I've stayed away from them since then. Not a very impressive company, and I'm not too surprised they're failing to deal effectively with this DDoS.
- plesiv 6y agoGandi is a domain registrar first and in that respect they're lightyears ahead of the competition. They don't do shady stuff of squatting on your domain searches etc. If you choose to use a value added service like VPS, you should expect subpar experience. You can go to any cloud provider and find a service for which you're going to have a worse experience than you had with Gandi VPS.
- dannyw 6y agoYep, this is like going to IKEA to buy kitchen knives.
- idnag_kcuf 6y agoIf I bought what turned out to be blunt or broken kitchen knives from IKEA, and they refused to accept a return and offer a refund, I wouldn't shop there again either.
- idnag_kcuf 6y agoNo I shouldn't expect a subpar experience, and that's why I no longer use Gandi. Claiming not to do shady things with user data is the minimum I expect from a domain registrar. Fortunately, Gandi aren't unique in that respect. Gandi came highly recommended to me, so I was quite disappointed by the reality.
- dennis_jeeves 6y agoSo who in your opinion is _clearly_ better than Gandi?
- vntok 6y agoOVH, DigitalOcean, Hetzner, AWS... everyone else is much better performance and stability wise.
- eknkc 6y agoWe used them for years too but their admin panels and tooling had too many issues. We lost access to stuff more than once and we moved to name.com at some point. Haven’t had any issues on name.com so I would not really recommeng Gandi.
- Aldqueath 6y agoI would not call Gandi high integrity folks after having seen that story of them losing customers' paid emails and telling them to restore from their own backups https://news.ycombinator.com/item?id=22001822 https://news.ycombinator.com/item?id=22001822
- lta 6y agoA few friends of mine work there, so I'm biased obviously. But I think they're overall pretty awesome
- 55555 6y agoWhy would someone be DDOSing Gandi? extortion?
- rovr138 6y agoCould be, also they could be showing off their capacity.
- jackhalford 6y agoIt can also be a shroud for data exfiltration. As in 100GB of sensitive data traffic would be drowned in the noise of the DDoS traffic.
- viraptor 6y agoThat would be a weird and not so subtle approach. The service has to be responsive enough to handle that 100GB of traffic, which DDoS works against. 1GB a day would be a rounding error for any established internet service, on the other hand if you get DDoS'ed, you will do at least a bit of log review. I don't see what anyone would gain this way.
- KirillPanov 6y agoNot really. If the attacker has code execution on the target servers they can just blast out UDP packets (with erasure coding for bonus points). The DDOS will jam up the inbound link to the target server, but the outbound link will be able to send out unacknowledged UDP packets just fine. Can make them look like DNS requests if you're paranoid. If the attacker doesn't have code execution on the target -- in other words they just found a way to make some web server cough up data that it shouldn't -- then this won't work.
- viraptor 6y agoThis sounds like an action movie sequence. See the sibling answer. DDoS gives people reason to look into logs/metrics. If you get caught by an automatic check, you fail either way. If not, you move from an "everything normal" scenario to "we're looking at ways to kill traffic" scenario, which is not beneficial for exfil.
- tmathmeyer 6y agoCan someone change the title to "We are under DDos" for grammatical correctness? It's correct on gandi.net's site.
- quenix 6y agoIt gave me a nice chuckle.
- danvayn 6y agoAgreed but it is a little insensitive
- georgeplusplus 6y agoI found it humorous that the title was insinuating they werent DDoSing enough. What did you find insensitive about it?
- curiousgal 6y agoI read it in Kevin Hart's voice followed by his famous "Help me!"[0]. 0.https://youtu.be/3bBahi0y970 https://youtu.be/3bBahi0y970
- bzb6 6y agoThey are french... they should change it to “we are sur le ddos”
- esamueljohnson 6y agoOP here. They corrected later. Screenshot I took at that time: https://imgur.com/yeFkbCM https://imgur.com/yeFkbCM
- m463 6y agoDisturbing Disruption of Sentence Disavowal? Disavowel? :)
- lvncelot 6y agoIt somehow reinforced a sense of urgency for me.
- purplecats 6y agoI would be really interested in a website that tracks services that are currently under attack or some sort of fire so I can follow their status updates. I love examining high stress situations like that in real time.
- jp1016 6y agoI think it is better not to share it on hn, you will receive more traffic as this is on front page and could worsen the ddos
- newtohn1234 6y agothey should use cloudflare, such a rookie mistake.
- mike256 6y agoCloudflare, the solution for no problem... I don't believe in DDOS without any proof. Imo they just have some performance problems to solve. I think the DDOS would magically stop after Database Maintenance on Jan 25.
- neilsense 6y agoLook at DAnon over here
- jackjeff 6y agoDoes cloudflare use cloudflare?
- okoslaatoo 6y agoOn the site it says """Identified - We are still targeting by a DDoS. Our teams are starting to push mitigations.""" they are the target of the DDoS, right? If so, it should be """We are targeted by a DDoS.""" It is confusing to read...
- robjan 6y agoIt's a French company so the person who wrote this probably uses English as their second language
- Mulpze15 6y agoIf Gandi folks read this: I am curious to read your post-mortem analysis on this. I was seriously thinking about bringing some domains back to LiveDNS. I am thinking that after this, you may even be a little better at your job. Transparency is key here for me, even if you messed up.