At this point, many people have been bailing from the server due to the uptime issues. What’s the rub?

  • Sanctus@lemmy.world
    link
    fedilink
    English
    arrow-up
    107
    ·
    1 year ago

    They’re being targeted for constant DDoS attacks. Could be multiple reasons. But the takeaway should be to spread out evenly through the fediverse. Don’t all pile into .world (as I post this on my .world account).

    • Carighan Maconar@lemmy.world
      link
      fedilink
      arrow-up
      48
      arrow-down
      15
      ·
      1 year ago

      Probably those ultra right-wingers from that recently defederated instance being the adult man-children they always are.

      • Buelldozer@lemmy.today
        link
        fedilink
        arrow-up
        23
        arrow-down
        4
        ·
        edit-2
        1 year ago

        It could be tbut the most recent de-federation controversy didn’t involve a right wing instance.

        • ieightpi@lemmy.world
          link
          fedilink
          arrow-up
          28
          arrow-down
          6
          ·
          1 year ago

          I know it’s easy to blame the alt right for everything, but the hexbear community was a communist community.

        • Illiterate Domine@infosec.pub
          link
          fedilink
          English
          arrow-up
          13
          arrow-down
          1
          ·
          edit-2
          1 year ago

          IIRC these rolling DOS attacks started before the most recent defed, though. They’ve been happening for a while.

        • 💡dim@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          2
          ·
          1 year ago

          there was a defed with a bunch of tankies, and they were openly discussing on their instance doing and having done ddos attacks

        • squiblet@kbin.social
          link
          fedilink
          arrow-up
          3
          arrow-down
          1
          ·
          1 year ago

          The Rammy thing? Many of the objectionable posts there were by the exact same person from exploding heads.

        • Pratai@lemmy.ca
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          2
          ·
          1 year ago

          Right wingers aren’t smart enough to coordinate something like that.

        • henfredemars@infosec.pub
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          I know nothing of Star Trek but after watching the newer Kahn movie I was inspired to watch starting from the modernized episode 1.

          What I’m saying is–yes.

      • Rhaedas@kbin.social
        link
        fedilink
        arrow-up
        6
        ·
        1 year ago

        Lemmy Explorer can help give a big picture view of what’s out there, both in instances and in communities. Kbin instances are also viewable, you have to select them from the top right menu.

      • Arotrios@kbin.social
        link
        fedilink
        arrow-up
        3
        ·
        edit-2
        1 year ago

        Been on kbin.social for a month and it’s been pretty solid. Note it’s a different platform than lemmy (designed to read both lemmy and mastodon), but does a great job posting to and handling the content from lemmy platforms. There’s growing pains here too, but the uptime has been good.

        • tal@kbin.social
          link
          fedilink
          arrow-up
          2
          ·
          edit-2
          1 year ago

          I think that the dev and some volunteers at kbin.social has done a lot of work on scaling up that instance, but even so, kbin.social will probably hit hard-to-fix scaling issues at some point. It’s also a big instance, like lemmy.world.

          I’d been looking at another (presently small) US-based one-person kbin instance, was planning to hop over if it stayed up to help spread load, but it looks like it went down.

          I suppose that once a number of instances have a track record of staying up for N months and with their uptime records established, it’ll be easier to figure out what instances are good alternatives, are likely around for the long haul, and which ones will vanish in the wind.

          • Arotrios@kbin.social
            link
            fedilink
            arrow-up
            1
            arrow-down
            1
            ·
            1 year ago

            You’re right, and one of the reasons I decided to start a community here was because @ernest has done a fantastic job laying out the plans for scale at kbin (both the instance and the platform as a whole) thus far - detail here. Thus far he’s the only instance owner I’ve seen with a real roadmap, and actively applying for grant funding to cover scaling costs. It’s good to see - kbin is definitely his baby and he takes great care of it.

            Regarding other small kbin instances, you might look at kglitch.social. @kglitch has made some frontend changes that bring it more in line with Mastodon and Lemmy, and I haven’t seen an outage yet.

    • Rhaedas@kbin.social
      link
      fedilink
      arrow-up
      9
      ·
      1 year ago

      The big reason for being a target is the size. Why attack smaller ones with less effect? Like making a virus for anything besides Windows. But maybe the long term benefit is the movement of some to other instances, balancing out the loads.

  • Archmage Azor@lemmy.world
    link
    fedilink
    arrow-up
    39
    ·
    1 year ago

    My guess, some loveless planarian with a botnet felt they didn’t get enough attention from mommy and decided to hit .world with a couple DDOS attacks.

  • Bianca_0089@lemmy.today
    link
    fedilink
    arrow-up
    32
    ·
    1 year ago

    One claim is DDOS attacks, another claim is that the servers are too small for the massive amount of people that recently adopted lemmy

    I’d love to know which is true just because … . . it’s fun to know details

    • fiat_lux@kbin.social
      link
      fedilink
      arrow-up
      19
      arrow-down
      1
      ·
      1 year ago

      Massive amounts of organic traffic to too small a server technically is a DDOS, even if unintentional rather than malicious. So, both to varying degrees, probably?

    • RavenFellBlade@lemmy.world
      link
      fedilink
      arrow-up
      3
      arrow-down
      1
      ·
      1 year ago

      It’s DDOS. The admins for World have explicitly said so, and even said exactly how the attacks have been perpetrated by exploiting calls that require a lot of processing time to overload the server.

    • marcos@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      The numbers are quite open at the maintenance community. Unless most users just decide to visit it together every day, there’s a DDoS going on.

  • lechatron@lemmy.world
    link
    fedilink
    English
    arrow-up
    31
    ·
    1 year ago

    They were getting hit with a lot of DDoS attacks a week or two ago, that may still be going on. Also they took off faster than most instances so a lot of this is just growing pains.

    many people have been bailing from the server

    That’s not a bad thing, the content is shared between instances so you can get it on the other sites too. People going to other sites will hopefully help balance the load and possibly help with the growing pains. I haven’t created an account on another instance yet, but I’ve been visiting other instances when .world goes down.

  • PaulDevonUK@lemmy.world
    link
    fedilink
    arrow-up
    11
    arrow-down
    1
    ·
    1 year ago

    4 hours to post this?

    DDOS? Cloudflare is supposed to stop that. I see a lot of cloudflare errors.

    lemmy world status shows 292 instances in the past 8 days! Elevated response times and system resources repeated endlessly.

    Insufficient RAM and CPU are my main suspicion due to explosive growth. Parts aren’t cheap but are needed.

    How can we help with funding?

    Subscriptions? - NO. This is not a commercial endeavour.

    Donations? - Maybe. One off donations with no further commitment. Obviously, donate again if you want to.

    Go Fund Me? - Possible but who sets it up. Possible fraud?

    • lechatron@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 year ago

      It’s like a fun* little cat and mouse game, you figure out the patterns to block specific traffic, then they adapt and you start again. I even saw some users comment the other day they were being hit with false positives and blocked because the blocking was too aggressive. Fortunately there are companies that specialize in this kind of stuff like cloudflare. But that costs money so it wasn’t added until just recently, so it’s possible attacks are still getting around that.

      *obnoxious

    • squiblet@kbin.social
      link
      fedilink
      arrow-up
      2
      ·
      1 year ago

      Various clues, like what URLs they are requesting, what IPs/regions it’s from, if it appears to be real clients based on user agent and ability to execute javascript, and so on.

  • Schwim Dandy@lemmy.world
    link
    fedilink
    arrow-up
    8
    ·
    1 year ago

    I’ve hopped to another server due to the abysmal uptime of late. I’ll continue checking in though. I know they’re working on adding sysops so I’m sure things will improve.

  • ieightpi@lemmy.world
    link
    fedilink
    arrow-up
    7
    ·
    1 year ago

    I wish the admins would come out and give an update as to what is going on.

    I wish I could migrate my account to another instance.

    • OverfedRaccoon 🦝@lemm.ee
      link
      fedilink
      arrow-up
      6
      ·
      edit-2
      1 year ago

      You can, sort of.

      Use LASIM to download your subbed communities next time lemmy.world is up. Make a new account on another instance. Upload your communities to the new account with LASIM.

      Unfortunately, posts/comments don’t go - but you can do like me and just leave a trail between your accounts (if you care enough). I just link to and from my old/new accounts in the bio each time I make one. It’s a little janky, but it works - and it’s better than waiting hours for lemmy.world to be up for 12 minutes before going down again.