851
Welcome to 2025 (content.federation.network)
submitted 11 months ago by to c/memes@lemmy.world
82 comments fedilink hide all child comments
 

Welcome to 2025
@memes@lemmy.world

top 50 comments

sorted by: hot top controversial new old
[–] 135 points 11 months ago (10 children)

if you can provide me a better way to keep my homelab from getting DDoSed every five minutes then by all means, please share it

  • permalink
  • fedilink
  • source
  • hideshow 17 child comments
    •
  • [–] 59 points 11 months ago* (3 children)

    Just put it behind a wireguard server and don't expose any ports?

    If you absolutely must expose some stuff, get a cheap 3$/mo vps that connects via wireguard to your home and setup a reverse proxy? They almost all come with DDoS protection.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] [S] 30 points 11 months ago (2 children)

    @DaPorkchop_@lemmy.ml @memes@lemmy.world Is that an actual issue or a hypothetical one? I've never had an attack in 10 years of publicly hosting stuff.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 19 points 11 months ago (1 child)

    As someone else who used to host via an open port, you get random connections all the time. Almost constantly and the request paths make it obvious they are scanning for vulnerabilities. Via cloud flare the number of those requests is much lower, as they have to know at least the DNS to do so, (and can't guess it from a presented SSL cert.)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 12 points 11 months ago

    Yeah, I see random https and other connections all the time blindly scanning for vulnerabilities. Not enough to cause any real problems though. One time I publicly exposed redis or rabbitmq (can't remember which) and didn't set a password, so someone set a password for me :). That's about the worst that's happened to me.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 5 points 11 months ago (2 children)

    It's the reason I set up cloudflare in the first place, so yeah. I was getting SYN flood-ed to the point that my router would just crash almost immediately, and after rebooting it the attack would resume after a minute or two.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] [S] 7 points 11 months ago (1 child)

    @DaPorkchop_@lemmy.ml @memes@lemmy.world Hm weird, I don't see why they would spend their resources attacking random people without any kind of demand. Even at work I've never seen one happening.
    I still believe Cloudflare has most of its customers because of fearmongering tbh.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 7 points 11 months ago (1 child)

    It's a bit like saying "having a password on your account is fearmongering, why would anyone try to access your data".

    It's only fearmongering until you get attacked, and it's already too late when you do. Better to be proactive.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] [S] 6 points 11 months ago (1 child)

    @Alaknar@sopuli.xyz @memes@lemmy.world Being proactive doesn't mean you have to hide your personal service behind a billion dollar company. That is precisely the kind of overreaction triggered by fearmongering. If you don't know how to secure access points or harden configurations, no service will be able to do it for you as if by magic. Not to mention your responsibility towards your users, who may not want to be tracked by a third-party company without their knowledge every time they visit your site (or half of the internet by now).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
    load more comments (1 reply)
  • [–] 6 points 11 months ago (1 child)

    Get a router that has flood protection? This is like.. Extremely basic network protection.

    OpenWRT has had configurable syn-flood protection (enabled by default) since like 2010.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 11 months ago

    Even if the SYN packets were being ignored, the connection would still be unusable if there's enough incoming traffic for most legitimate packets to get dropped. And as mentioned in other comments, the router in question is a shitty ISP router which can't be replaced (although I do have a much fancier router with OpenWRT running behind that).

  • permalink
  • fedilink
  • source
  • parent
  • [–] 15 points 11 months ago (2 children)

    https://anubis.techaro.lol/

    You don't need Cloudflare.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
    • load more comments (1 reply)
  • [–] 15 points 11 months ago* (1 child)

    Is you homelab getting ddosed constantly?

    I had had it for years and never ever got ddosed.

    Are you sure it's actually ddos and not just the typical bots scanning for vulnerabilities? Which are easy defended for by keeping updated.

    It's weird as a DDOS is not something that's just happens, it's a targeted attack. It's a rare occurrence that someone decided to attack a homelab.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 9 points 11 months ago (1 child)

    I spent multiple days getting SYN flooded to the point my router would crash and reboot over and over, and it stopped the moment I set up cloudflare and asked my ISP to change my IP. This was the instance which pushed me over the edge, but there had been smaller attacks lasting a few minutes each for years leading up to this.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 11 points 11 months ago (1 child)

    What kind of router to you have? A good router should not crash from any amount WAN traffic. But yes, if you host anything you will get scanned even harder than usual.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 11 months ago

    Could you shell out for a decent firewall? It should be able to protect against majority of ddos attacks unless someone is paying for something big.

    But it really is fine to use cloudflare if you want the ddos protection. I wouldnt feel bad at all.

  • permalink
  • fedilink
  • source
  • parent
    • load more comments (3 replies)
    [–] 102 points 11 months ago (1 child)

    I deadass got a cloudflare error after reopening this post:

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
    • [–] 27 points 11 months ago (1 child)

    Don't forget your SSL certificate to prevent man-in-the-middle attacks. 🤪

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
    • [–] 27 points 11 months ago (2 children)

    cloudflare ddos protection is cetralization?

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 68 points 11 months ago (3 children)

    About 20% of global traffic is routed through Cloudflare so unfortunately Cloudflare is very much a massive case of centralization.

    A Cloudflare outage would affect a huge number of websites and services and they have some degree of control over the way you host your and use their services.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 35 points 11 months ago

    Yeah, did people forget the last big Cloudflare outage already? A good chunk of all big services went down simultaneously. Discord, Amazon, Twitter and even the PS and Xbox consoles networks lmao.

  • permalink
  • fedilink
  • source
  • parent
    • load more comments (1 reply)
    • [–] 21 points 11 months ago (9 children)

    Though I'm not a big fan of centralization, I use cloudflare. Their DDoS protection is unmatched, they have scraping protection, and just in case they decide to screw their users over, switching to another service is trivial.

  • permalink
  • fedilink
  • source
  • hideshow 9 child comments
    •
    load more comments (9 replies)
    [+] 7 points 11 months ago* (last edited 8 months ago)
    [deleted]
  • permalink
  • fedilink
  • source
    •
    [–] 6 points 11 months ago (7 children)

    I mean I don't really have a choice because i don't see a better way to put my home server on a url because I live in a dorm and can't port forward or get a static ip

  • permalink
  • fedilink
  • source
  • hideshow 7 child comments
    •
    load more comments (7 replies)
    [–] 3 points 11 months ago

    I unfortunately use cloudflare. They apparently charge the same price they pay for domain names.

    What better options do we have? I really want to know.

  • permalink
  • fedilink
  • source
    •
    load more comments
    view more: next ›