LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-24-2018, 06:39 AM   #1
dexter2486
LQ Newbie
 
Registered: Jun 2018
Posts: 2

Rep: Reputation: Disabled
Unhappy High CPU usage during Dos attack


I am having a self hosted game server hosted on google cloud using Ubuntu 14.04 everything was working fine but since last week a "Dos" attempt is made on gameserver or might be on VPS during which the cpu usage jumps to 100% and I see the rise in cpu usage due to the process "ksoftirq" also the ssh becomes unresponsive and server too. After 2-3 minutes or after restarting the server everything goes to normal. I can say its a DoS attempt because in google cloud monitoring I see rise in Incoming packets. I have upgraded the CPU to dual core and also RAM to 2 Gb but the issue cannot be solved. Tell me how can this dos attempt can be mitigated using Iptables or and script or how can I log the attackers IP to block it from panel.

Last edited by dexter2486; 06-24-2018 at 06:40 AM.
 
Old 06-24-2018, 09:07 PM   #2
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,323
Blog Entries: 28

Rep: Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142
There's not much you can do to prevent others from launching a DDoS attack at your server. Nevertheless, a web search for "mitigate ddos attack" will turn up a number of articles that you should find useful.

This one looks like a good place to start: https://www.wired.com/insights/2012/...os-mitigation/
 
Old 06-25-2018, 11:29 AM   #3
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 3,475

Rep: Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553
Quote:
Originally Posted by frankbell View Post
This one looks like a good place to start: https://www.wired.com/insights/2012/...os-mitigation/
Good article and written by someone at Incapsula.

The main thing that people generally fail to consider is that dealing with DDoS attacks on server "Oh, I've an IPTABLES firewall" is generally not particularly effective. If the connections are being made to the point that your on-server firewall is having to deal with it then your connection is likely to be swamped anyway.

External traffic filtering DDoS mitigation is highly effective and can generally handle pretty much any size of attack.

Having used Incapsula at a previous job I can recommend them and their mitigation is easy to implement.
 
Old 06-25-2018, 05:58 PM   #4
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
i know i'm only nitpicking, but...
Quote:
Originally Posted by dexter2486 View Post
I am having a self hosted game server hosted on google cloud
surely it can't be both self-hosted AND cloud hosted?
 
Old 06-25-2018, 09:13 PM   #5
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,323
Blog Entries: 28

Rep: Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142
Maybe it's a VPS on Google Cloud, not self-hosted, but self-managed.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Squid 3 near 100% cpu usage and high RAM usage piman Linux - Software 1 11-16-2013 02:20 AM
mysql server not responding with high cpu usage and high load avgs landysaccount Linux - Server 2 09-15-2013 03:46 AM
[SOLVED] High CPU load, but low CPU usage (high idle CPU) baffy Linux - Newbie 5 03-13-2013 09:24 AM
High CPU usage!! anishkumarv Linux - Server 1 10-19-2011 10:06 AM
High load and high cpu kernel usage enid Linux - Server 8 09-30-2010 03:33 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:16 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration