koddos.png

Notices where this attachment appears

1. pistolero (p@fsebugoutzone.org)'s status on Tuesday, 18-Jun-2024 16:16:12 JST pistolero

   in reply to
   @85f02109a28864e4713d3f972ab66a @blockbot @kirby It means go for it, do it. Looks like it stopped. Turn it back on on, crank it way up.
   
   Let me give you an idea of the scale. To test out the software I am working on, I exploited a different bug to DDoS myself: https://git.pleroma.social/pleroma/pleroma/-/issues/2765 . We had a sustained 800+r/s, and that's successful requests, right? I turned off the rate-limiting on /objects for that. Just compulsive posting in the hellthread. 800r/s isn't that amazing, but it's way bigger than 14.22 I don't know how many it would have taken to break it, because I couldn't get up the other instances to fetch posts any faster.
   
   People have hit the streaming endpoint before. We got aggressively scraped by several places, boardreader.com was feeding it to the FBI, we got DDoS'd by a DDoS mitigation company, we got flooded by Gab. Short of saturating the pipe (please don't, that *is* a pain), FSE is really hard to knock down. If you find a bug and *can* knock it down, feel free. Your existing strategy does not work here, but there are lots of holes in fedi, I'm sure you can find another one.
   koddos.png