[Gllug] nslookup resolves but not ping or http

[Jason Clifford]

On Fri, 2010-12-10 at 05:01 +0000, general_email at technicalbloke.com
wrote:
> Is this a "proper" DDos attack or simply their servers buckling under 
> the weight of millions of curious people trying to access it? 

According to the people running one very well known VM hosting company
they were hit with a 5 minute burst of about 4Gb/s which overwhelmed
their infrastructure for a short time. That's "proper" enough for me.

So far the mirror I set up has not seen anything like that though. I
don't know whether that means those who are running the DDoS have given
up or just have not reached me on the list yet.

> Everyone 
> is asking me about it right now and it turns out they have all tried to 
> go there in the last week or so, even deeply non technical people. It's 
> intriguing on a mass scale and few sites could stand their readership 
> leaping several orders of magnitude upwards overnight. Ironically if 
> they were still on EC2 they might be in with a chance!

OK I can see that wikileaks is experiencing a lot of traffic but that's
not so hard to handle - particularly as it's all static content. A
reasonably well tuned box should be able to handle that well enough
these days and if they see load becoming excessive they always have the
option of pushing traffic to the mirrors now.

> So are there any detailed accounts of this DDos on teh intarwebs or is 
> it all just speculation?

Yes, as above.

-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug