RicAlmighty wrote: »DenverRalphy wrote: »RicAlmighty wrote: »nihonseanb14_ESO wrote: »Several boots in a row. Looks like they broke something when they worked on the databases. 1 step forward, 3 steps back.
Database issues don't cause disconnects. This is a connectivity issue, probably at their end.
Crashes cause disconnects. If the server side processes are crashing, that will disconnect every player currently connected to that instance. That is almost certainly what is happening here.
Crashes cause complete shutdowns. Players are still getting back in, only to be disco'd again minutes later.
This is likely a DDOS attack. Happens pretty regularly whenever gaming servers announce they're performing "upgrade maintenance".
Players aren't logging back into the same server instance that crashed, I would have thought that was obvious. At any given time there are many separate server instances running with a maximum number of players connected to each one. If it crashes, then the players connected to that instance are immediately dropped. This does not cause a shutdown unless it's the operating system itself which crashes, which is highly unlikely.
This could be a DDos attack, but if it is that speaks even more poorly of the infrastructure as there are ways to mitigate invalid traffic requests. Handling DDos attacks is not a new thing, companies have been dealing with it for over 20 years and there are pretty standard mitigation tactics, provided that they are actually put in place that is.
RicAlmighty wrote: »DenverRalphy wrote: »RicAlmighty wrote: »nihonseanb14_ESO wrote: »Several boots in a row. Looks like they broke something when they worked on the databases. 1 step forward, 3 steps back.
Database issues don't cause disconnects. This is a connectivity issue, probably at their end.
Crashes cause disconnects. If the server side processes are crashing, that will disconnect every player currently connected to that instance. That is almost certainly what is happening here.
Crashes cause complete shutdowns. Players are still getting back in, only to be disco'd again minutes later.
This is likely a DDOS attack. Happens pretty regularly whenever gaming servers announce they're performing "upgrade maintenance".
Players aren't logging back into the same server instance that crashed, I would have thought that was obvious. At any given time there are many separate server instances running with a maximum number of players connected to each one. If it crashes, then the players connected to that instance are immediately dropped. This does not cause a shutdown unless it's the operating system itself which crashes, which is highly unlikely.
This could be a DDos attack, but if it is that speaks even more poorly of the infrastructure as there are ways to mitigate invalid traffic requests. Handling DDos attacks is not a new thing, companies have been dealing with it for over 20 years and there are pretty standard mitigation tactics, provided that they are actually put in place that is.
RicAlmighty wrote: »DenverRalphy wrote: »RicAlmighty wrote: »nihonseanb14_ESO wrote: »Several boots in a row. Looks like they broke something when they worked on the databases. 1 step forward, 3 steps back.
Database issues don't cause disconnects. This is a connectivity issue, probably at their end.
Crashes cause disconnects. If the server side processes are crashing, that will disconnect every player currently connected to that instance. That is almost certainly what is happening here.
Crashes cause complete shutdowns. Players are still getting back in, only to be disco'd again minutes later.
This is likely a DDOS attack. Happens pretty regularly whenever gaming servers announce they're performing "upgrade maintenance".
Players aren't logging back into the same server instance that crashed, I would have thought that was obvious. At any given time there are many separate server instances running with a maximum number of players connected to each one. If it crashes, then the players connected to that instance are immediately dropped. This does not cause a shutdown unless it's the operating system itself which crashes, which is highly unlikely.
This could be a DDos attack, but if it is that speaks even more poorly of the infrastructure as there are ways to mitigate invalid traffic requests. Handling DDos attacks is not a new thing, companies have been dealing with it for over 20 years and there are pretty standard mitigation tactics, provided that they are actually put in place that is.
I can't imagine a company owned by Microsoft would be defenseless. They've mentioned their mitigation in the past and that it can be a bit rough as it kicks in.
Hi all, we think we have the issue figured out and populations are starting to recover. We are monitoring things as well.
Hi all, we think we have the issue figured out and populations are starting to recover. We are monitoring things as well.
@ZOS_Kevin It's too early for an RCA, but what seems to be the issue?
@ZOS_Kevin It's too early for an RCA, but what seems to be the issue?
We have determined that it was a malicious network attacks against the ESO service. Our teams are working to keep track of these and adapt with various types of mitigation.
@ZOS_Kevin It's too early for an RCA, but what seems to be the issue?
We have determined that it was a malicious network attacks against the ESO service. Our teams are working to keep track of these and adapt with various types of mitigation. There will be additional ping times due to mitigation being active. Just wanted to be clear there.
Hi all, we think we have the issue figured out and populations are starting to recover. We are monitoring things as well.
imaslowlearner wrote: »@ZOS_Kevin It's too early for an RCA, but what seems to be the issue?
We have determined that it was a malicious network attacks against the ESO service. Our teams are working to keep track of these and adapt with various types of mitigation. There will be additional ping times due to mitigation being active. Just wanted to be clear there.
ESO didn't have consistent attacks before it was acquired by microsoft. Are these vulnerabilities caused by microsoft's security? If microsoft is to blame for the vulnerabilities could you possibly look into what amazon or apple does to prevent cyberattacks without crippling the game?
DenverRalphy wrote: »imaslowlearner wrote: »@ZOS_Kevin It's too early for an RCA, but what seems to be the issue?
We have determined that it was a malicious network attacks against the ESO service. Our teams are working to keep track of these and adapt with various types of mitigation. There will be additional ping times due to mitigation being active. Just wanted to be clear there.
ESO didn't have consistent attacks before it was acquired by microsoft. Are these vulnerabilities caused by microsoft's security? If microsoft is to blame for the vulnerabilities could you possibly look into what amazon or apple does to prevent cyberattacks without crippling the game?
Pretty sure ESO has been targeted quite often long before the Microsoft acquisition.
imaslowlearner wrote: »@ZOS_Kevin It's too early for an RCA, but what seems to be the issue?
We have determined that it was a malicious network attacks against the ESO service. Our teams are working to keep track of these and adapt with various types of mitigation. There will be additional ping times due to mitigation being active. Just wanted to be clear there.
ESO didn't have consistent attacks before it was acquired by microsoft. Are these vulnerabilities caused by microsoft's security? If microsoft is to blame for the vulnerabilities could you possibly look into what amazon or apple does to prevent cyberattacks without crippling the game?
imaslowlearner wrote: »@ZOS_Kevin It's too early for an RCA, but what seems to be the issue?
We have determined that it was a malicious network attacks against the ESO service. Our teams are working to keep track of these and adapt with various types of mitigation. There will be additional ping times due to mitigation being active. Just wanted to be clear there.
ESO didn't have consistent attacks before it was acquired by microsoft. Are these vulnerabilities caused by microsoft's security? If microsoft is to blame for the vulnerabilities could you possibly look into what amazon or apple does to prevent cyberattacks without crippling the game?
Yeah they did. There were repeated periods of ddos attacks that presented just like this, and eventually made zeni partner with Akamai. The ddos attacks really slowed down after that but added extra hops and latency to everyone’s connection.
That was years before the MS acquisition.