Signed-off-by: Skylar "The Cobra" Widulski <cobra@vern.cc>
This commit is contained in:
Skylar "The Cobra" Widulski 2022-10-27 12:20:50 -04:00
parent 32338f648e
commit 6c78cd79c1
Signed by: cobra
GPG Key ID: 4FD8F812083FF6F9
3 changed files with 21 additions and 2 deletions

View File

@ -1,5 +1,5 @@
---
title: New Service: Tor Bridge
title: New Service\: Tor Bridge
date: Wed, 26 Oct 2022
author: ~cobra
---

View File

@ -0,0 +1,19 @@
---
title: ~vern Onion DDoS
date: Mon, 24 Oct 2022
author: ~vern team
---
Hi,
We have recently been DDoSed over the Tor network, meaning our onion services were down for a short period of time.
I first noticed strange behaviour starting around 9:30 AM, where ~vern onions would time out. I have seen this behaviour before, in DuckDuckGoOnion. I didn't know what it was, so I tried restarting the Tor service, which worked at first. Then it happened again, and when I restarted Tor, the onion sites would simply not connect at all.
I began to wonder if maybe our ISP had blocked tor, or if it was another network issue. I tried using `torsocks` to cURL vern.cc, which worked on my local machine, but not the tildeserver. As my suspicions of the ISP grew, I decided to rule out a DoS attack by checking the data usage graphs. The one for October 24th showed a great spike in network usage at 9:30 AM, the time i began noticing the issues.
![A graph showing data using for 2022-10-24](https://0.vern.cc/QU.svg)
This graph proved that it wasn't the ISP, and our Tor service was, in fact, being DDoSed over the Tor network. It had to be over the Tor network, because no other services were going down. I disabled Tor and waited until around 1:00 PM, when I re-enabled Tor and the onion services started working again. Hopefully, this does not happen again in the future.
~cobra

View File

@ -1,5 +1,5 @@
---
title: New Service: Tor Relay
title: New Service\: Tor Relay
date: Thu, 27 Oct 2022
author: ~cobra
---